500.6(b)—500.6(b)
>Control Description
Each covered entity shall maintain records required by paragraph (a)(1) of this section for not fewer than five years and shall maintain records required by paragraph (a)(2) of this section for not fewer than three years.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.