Prescription Record Retention: What Actually Exists and How to Access It
When you ask how far back prescription history goes, the answer depends entirely on which system you're looking at. There is no single universal timeline. The records held by your local pharmacy, the ones your insurance PBM maintains, and the federal databases each operate on different retention schedules. I've dealt with enough prior authorization appeals and medical record requests to know that assuming one source will have everything usually ends poorly. At the pharmacy level in the United States, state law sets the baseline. Most states require pharmacists to keep prescription records for at least two years. A handful require five, and some go as long as ten. This applies to the physical or electronic record of each fill. So if you need proof of a medication taken four years ago and your state only mandates two-year retention, that pharmacy may have already purged the file. This isn't speculation — I pulled records for a client in a jurisdiction with a two-year window and the printout literally stopped at the cutoff date. We had to pivot to the PBM route.
How Far Back Does Prescription History Go Through Different Channels
PBM records tend to go further. Major Pharmacy Benefit Managers like CVS Caremark, Express Scripts, and OptumRx typically retain claim histories for seven to ten years, and in some cases longer because they have business reasons to keep the data. These are the claims-level records — they show the drug, the date, the quantity, the prescribing NPI, and the pharmacy where it was filled. They won't always show dose adjustments or clinical notes, but they're useful for reconstructing a medication timeline. For controlled substances specifically, there's an additional layer. The DEA requires retailers to maintain records for at least two years, but some states impose longer requirements on controlled substance dispensing records alone. Illinois, for example, requires ten years for all prescription records including controlled substances. If you're tracking a Schedule II fill from six years ago in a two-year state, the pharmacy record is gone. The PBM claim may still exist if they processed it through a covered plan. E-prescribing changed the game in practice. Before the mid-2010s, a lot of prescriptions were written on paper pads or transmitted via fax, and those physical copies were the only record. Paper degrades. Faxes get lost. Offices reorganize and old boxes get dumped. Once e-prescribing became the default for most offices, electronic records became the primary source and retention became more systematic. But early e-prescribing records from 2012 through 2016 are scattered across multiple systems because adoption was inconsistent. I've spent hours tracking down a single prescription from 2014 because it was e-prescribed but the pharmacy's practice management software had been upgraded twice since then and the original data had been migrated incompletely.
Federal programs add their own timelines. Medicare Part D sponsors maintain prescription event data for six years from the date of the event, per CMS requirements. That's claims data, not clinical records, but it's the most reliable source for people who've been on Medicare over a long span. Veterans Affairs records, if the patient received care through the VA, can go back decades because the VA has maintained centralized electronic health records since the late 1990s through the Cerner implementation and earlier systems before that. State prescription drug monitoring programs, often called PDMPs, are a separate question entirely. These are real-time databases that track controlled substance and sometimes all prescription fills. Retention policies vary wildly by state. Some hold data indefinitely. Others purge after five years. A few after ten. You can't rely on a PDMP lookup to give you a complete history unless you know your state's specific retention rule. I worked a case where the PDMP only showed seven years back, and the patient's relevant medication change had happened in year nine. Had to get the pharmacy to produce old records through a formal request instead. Here's something most people don't realize: your insurance company's internal records may extend beyond what either the pharmacy or the PBM shows. When a claim is denied and then appealed, the appeal package becomes part of the insurer's file. Those files are retained for seven years minimum under ERISA and many state insurance codes. So a medication that was denied and appealed in 2018 might still appear in the insurer's archive even if the PBM purged the original claims record.
Get the Full Details
The practical workaround I use when someone needs a full history is to pull from three sources simultaneously. First, request the prescription history report directly from the pharmacy chain's corporate office — not the individual store. Corporate IT systems often retain data longer than the store-level terminal. Second, submit a request to your PBM through the member portal or by calling member services. Third, pull the PDMP record for your state and note its cutoff date. Cross-reference all three. The overlap will give you the most complete picture. One thing to keep straight: "prescription history" means different things to different people. A pharmacy dispensing record shows what was filled. A PBM claims record shows what was billed. A PDMP record shows what was dispensed of monitored substances. A medical chart shows what was prescribed and why. These four sources will not always align. I've seen cases where the PDMP showed a fill that the PBM had no record of because it was paid out of pocket. I've also seen the reverse — a PBM claim with no PDMP entry because the medication wasn't a monitored substance but the patient assumed it was recorded there anyway. If you need documentation for legal or medical purposes, don't rely on a single source. Get written confirmation from each system you query, including the date range covered. A PDMP printout that stops at year five isn't useless, but it's incomplete and presenting it as complete will come back to haunt you. Same with a pharmacy printout — ask them to confirm their retention policy in writing so you know whether the gap is a system limitation or an actual absence of records.