Scanning paper trip logs and shredding the originals: what Medicaid, the IRS, and HIPAA allow

Can you shred trip logs once they are scanned?

In most states you can, as long as the scan is complete, readable, and kept for the full retention period. The answer comes from three bodies of rules, and for any one record the strictest of them wins. What goes on each trip record is in the NEMT documentation requirements guide; this page is about keeping that record as paper or as a scan.

1. Electronic transactions law. Section 12 of the Uniform Electronic Transactions Act (UETA) says a legal duty to keep a record is met by an electronic record that accurately reflects the information and remains accessible for later reference. Subsection (d) extends that to laws demanding the original, and subsection (f) covers records kept for evidence or audits. The drafters’ comment says it outright: absent a specific rule requiring the written record, paper may be destroyed once it is saved in a form that meets the section. The federal ESIGN Act carries the same rule for records tied to interstate commerce (15 U.S.C. 7001(d)). How that law treats signatures drawn on a driver’s phone is covered in the electronic signatures guide.
2. Your payers. UETA section 12(g) leaves each state agency free to add retention requirements for records under its jurisdiction, and broker contracts add terms of their own. The next section shows how differently Medicaid programs word it.
3. The IRS. Invoices, fuel receipts, van purchase files, and payroll paperwork fall under a separate federal imaging standard, covered further down.

HIPAA does not decide how long trip logs are kept. HHS says the Privacy Rule contains no medical record retention requirement and that state law generally governs, while the privacy safeguards apply the whole time the information is in your hands, through disposal. HIPAA’s six-year rule (45 CFR 164.316(b)(2) and 164.530(j)) covers the HIPAA paperwork itself: written policies, procedures, and required assessments such as the risk analysis.

How state Medicaid programs word scanned and imaged records

The three programs below all accept electronic records in some form, but their wording differs enough that you should read your own state’s sentence before the shredder comes out:

• North Dakota. The state’s NEMT manual sends transportation providers to its Provider Requirements policy, which says records must “be in their original or legally reproduced form. This may be electronic.” Records must be legible and kept for seven years, and a provider using electronic records needs a system that lets them be accessed and retrieved promptly.
• Minnesota. The NEMT statute says trip documentation “may be collected and maintained using electronic systems or software or in paper form” as long as it can be produced on request (Minn. Stat. 256B.0625, subd. 17b). The older general rule, Minnesota Rules 9505.2190, sets five years of retention after the initial billing date and says microfilm or electronically stored records satisfy it “in the fourth and fifth years after the date of billing.” The statute is newer and broader, but if you plan to shred Minnesota logs younger than three years, get the Department of Human Services’ answer in writing first.
• New York. Providers must keep “contemporaneous” records for six years (18 NYCRR 504.3(a)), and the transportation manual starts that six-year count on the payment date. The manual also has a disaster rule: if a fire, flood, or similar event wrecks a provider’s paper or electronic records, the provider must self-report the loss to the state’s Office of the Medicaid Inspector General (OMIG), explaining what happened, which kinds of records and which service dates are affected, and including proof such as documents or photographs.

Brokers usually say how long, not in what form. MTM’s standard agreement (the copy Pennsylvania publishes, dated January 1, 2023) requires ten years of full and complete records covering every operation tied to the agreement. WellTrans’s Indiana agreement, finalized in October 2025, requires records for the whole contract term plus ten years, and copies are due within three days of WellTrans asking. When a contract is silent on format, ask the broker’s provider relations contact in writing whether scanned copies satisfy it, and file the answer with the contract.

The IRS standard for scanned invoices, receipts, and payroll files

The IRS lets you destroy paper books and records once they are imaged in a system that meets Revenue Procedure 97-22 and you have tested that system. Publication 583, updated April 30, 2026, still points business owners to that procedure. It covers any electronic storage system that images paper, whether you run it yourself or a service bureau runs it for you, and section 3.03 says using an outside service does not shift the responsibility. What it asks for, in plain terms:

• A complete, accurate transfer and an index that lets you find and reproduce any record. The index can be as simple as a unique number for each document plus a list describing each one, as long as it works like a reasonable paper filing system.
• Controls against tampering. Reasonable controls must prevent and detect unauthorized additions, changes, and deletions, as well as files that deteriorate, and the system needs regular checks of what it holds.
• Legible output. An observer must be able to identify every letter and numeral quickly, on screen and on a printout.
• An audit trail linking the books to the source documents, so an examiner can go from a ledger entry to the scanned invoice behind it.
• Written descriptions of the system, its procedures, and its index, handed to the IRS on request.
• No contract that limits IRS access. A storage service whose license terms restrict the IRS from the files fails the procedure.

Section 7 allows the originals to be destroyed after you have tested the system, confirmed it reproduces the records correctly, and put procedures in place to keep it that way. If you later stop maintaining the hardware and software needed to read the files, the records count as destroyed unless the IRS can still get to them. A failed system can bring a Notice of Inadequate Records and accuracy-related penalties, which the procedure says may not apply if you kept the original paper.

Do scanned copies hold up in court and in audits?

Yes, if the copy is reliable. Under 28 U.S.C. 1732, when a business copies its records in the regular course of business by photographic, microfilm, or any other process that accurately reproduces the original, “the original may be destroyed in the regular course of business unless its preservation is required by law.” The copy is then as admissible as the original “in any judicial or administrative proceeding,” whether the original still exists or not. Federal Rule of Evidence 1003 admits a duplicate to the same extent as the original unless a genuine question is raised about the original’s authenticity or admitting the copy would be unfair.

That exception is the weak point for scans. A page missing from a batch, a rider signature too faint to read, or a file nobody can say who created invites the authenticity question. The answer is a scanning routine done identically each day that leaves a record of its own, which the next section lays out.

How to scan trip logs so the copy can replace the paper

A scan can stand in for the paper only if it captures everything the paper showed and nobody can quietly change it afterward. The National Archives’ rule for federal agencies digitizing their own temporary records is a good model even though it does not bind a private company: capture all the information and every page, make the copy usable for every purpose the paper served, protect it from unauthorized changes, and keep it findable for the whole retention period (36 CFR 1236.32). Before destroying originals, agencies must also check for legal restrictions such as a litigation hold (1236.36). For permanent typed records, agencies scan at no less than 300 pixels per inch and in color when color is needed to read the record (1236.50).

For a small NEMT office, the routine looks like this:

1. Scan within a day or two of the logs coming in, in the same batch every time: one driver’s day, or one day for the whole fleet.
2. Capture every page and both sides, including cancellation notes, mileage sheets, and signature pages stapled to the log. Use at least 300 pixels per inch, and color where pen color or highlighting carries meaning.
3. Check each scan against the paper before the batch is closed: the page count, each signature, both times on every leg, and both odometer readings. Rescan anything you cannot read on screen.
4. Name and index the files so any log can be pulled by date, driver, and trip number.
5. Lock the files. Store them read-only, limit who can delete them, and keep a backup in a second location. Scans of trip logs carry rider names, addresses, and Medicaid numbers, so they are electronic protected health information, and the HIPAA Security Rule requires policies that keep it from being improperly altered or destroyed (45 CFR 164.312(c)(1)). Access controls and backups are covered in the HIPAA guide for NEMT providers.
6. Write the procedure down and keep a short log for each batch: date, who scanned, page count, and who checked it. That log is what shows years later that a copy is reliable.

Driver files and invoices follow the same routine. How long each employee record has to last is in the guide to employee record retention.

When the paper can go, and how to destroy it

Wait to destroy the originals until all four of these hold:

1. Your state program and every broker on those trips accept electronic copies for that record. In Minnesota, settle the three-year question first.
2. The batch was checked page by page and its log entry is on file.
3. No audit, investigation, or claim touches those dates. WellTrans’s Indiana agreement bars destroying records that are under audit, review, or investigation, and once a lawsuit is likely, a litigation hold freezes the paper as well as the files.
4. The scans are backed up outside the office.

Then shred, burn, pulp, or pulverize the paper until nothing on it can be read or pieced back together, the methods HHS lists for paper that carries patient information. Whole trip logs never go in a recycling bin or an open dumpster. The guide to HIPAA record disposal covers shredding vendors and certificates of destruction. From then on, the scanned copy carries the rest of the retention clock, counted from the same date the paper would have been.

Fewer pages to scan in HealthRide

The easiest log to scan is one that never existed on paper. Riders sign on the driver’s phone in the HealthRide driver app, and the app saves each leg’s actual times and GPS-recorded miles while the trip runs. Months later, when a broker wants proof of a ride, the trip log report gives it to you as a CSV file or a printable PDF instead of a box of scans.