CMS requires that providers submitting cost reports retain all patient records for at least five years after the closure of the cost report. And if you're a Medicare managed care program provider, CMS requires that you retain the patient records for 10 years.