For most laboratories operating in the United States, the phrase “sample retention policy” summons an SOP binder, a storage room somewhere down the hall, and a vague sense that something should be done with those samples eventually. What it rarely summons — with precision — is the specific regulatory obligation that governs how long a particular sample type must be held, who has the authority to authorize its disposal, and what documentation must exist before anything leaves the building.
That gap is where compliance exposure lives.
This guide is not about storage best practices or the mechanics of a laboratory information management system. It is a regulation-first reference: a map of what U.S. federal law actually requires, broken down by regulatory framework, sample type, and retention period. Whether you are a lab director writing or revising a retention SOP, a quality manager preparing for a CAP inspection, or a compliance officer reconciling competing obligations, the goal here is to give you the specific citations you need — not a general overview of why retention matters.
Why Retention Policy Is a Compliance Problem, Not Just an Administrative One
The failure to retain samples for mandated periods is not treated as a paperwork error by federal regulators. Under 21 CFR Part 211, the FDA considers inadequate record and sample retention a cGMP violation subject to warning letters, consent decrees, and — in cases of systemic failure — facility shutdowns. Under 21 CFR Part 58, the GLP framework, FDA can disqualify a testing facility from submitting data in support of any regulatory application if archives are found noncompliant.
The inverse problem — retaining samples longer than required without proper disposal authorization — creates its own exposure. Expired chemical samples sitting in storage may cross into RCRA hazardous waste territory without a formal waste determination. Biological specimens retained indefinitely without documentation can complicate chain-of-custody in litigation. And in accredited clinical labs, undocumented disposal is a deficiency finding during CAP or CMS inspection.
The answer to both problems is the same: a written policy, keyed to specific regulatory requirements, with documented authorization at the point of disposal.
U.S. Sample Retention Requirements by Regulatory Framework
1. FDA Pharmaceutical Manufacturing — 21 CFR Part 211 (cGMP)
The foundational pharmaceutical retention rule sits in 21 CFR § 211.180, which governs production, control, and distribution records. Any production, control, or distribution record specifically associated with a batch of a drug product must be retained for at least one year after the expiration date of the batch, or, for certain OTC products lacking expiration dating, three years after distribution of the batch.
For reserve samples — the physical drug product retained for future testing — 21 CFR § 211.170 imposes its own discipline. The reserve sample must be retained for one year after the expiration date of the drug product, and it must consist of at least twice the quantity necessary to perform all required tests, except those for sterility and pyrogens. For OTC drug products without expiration dating, the retention period extends to three years after distribution of the last batch.
The practical implication: a drug product with a two-year shelf life requires that your reserve sample sit in storage until three years after manufacture — one year post-expiry. A product with a five-year shelf life requires six years of reserve sample retention. Your retention SOP must calculate the clock correctly for each product type, not apply a blanket period.
2. FDA Good Laboratory Practice (GLP) — 21 CFR Part 58
GLP-regulated nonclinical studies — toxicology, pharmacokinetics, safety pharmacology conducted in support of an IND or NDA — operate under a separate retention framework. Under § 58.190, all raw data, documentation, protocols, final reports, and specimens (with the exception of specimens from mutagenicity tests and wet specimens of blood, urine, feces, and biological fluids) generated as a result of a nonclinical laboratory study must be retained.
The retention clock is governed by 21 CFR § 58.195. Records must be retained in the archive for whichever of the following periods is shortest: a period of at least two years following the date on which an application for a research or marketing permit, in support of which the results of the nonclinical study were submitted, is approved by the FDA. Archives must also retain study records for at least five years after submission if the application is not approved. If no submission occurs, records are kept for at least two years after study completion.
Wet specimens — blood, urine, feces, biological fluids — are explicitly excluded from the general specimen retention mandate. They need only be retained as long as their quality permits valid evaluation and never beyond the applicable record retention period. This is a meaningful carveout for laboratories managing high-volume bioanalytical studies.
GLP archives must be formally managed. A specific individual must be identified as responsible for the archives, only authorized personnel may enter, and all material must be indexed to permit expedient retrieval. An archive that functions as a shared drive with inconsistent naming conventions does not meet this standard, regardless of how long the files have been stored.
3. Clinical Laboratories — CLIA (42 CFR Part 493)
The Clinical Laboratory Improvement Amendments, administered by CMS, govern most U.S. clinical laboratories performing patient testing. Retention requirements are codified in 42 CFR § 493.1105, and they vary meaningfully by specimen and record type.
Test requisitions and authorizations, including patient charts or medical records used as the test requisition, must be retained for at least two years. Quality control and patient test records must also be retained for at least two years.
For pathological specimens, the periods are substantially longer. Cytology slide preparations must be retained for at least five years from the date of examination. Histopathology slides must be retained for at least 10 years from the date of examination. Pathology specimen blocks must be retained for at least two years from the date of examination, and remnants of tissue for pathology examination must be preserved until a diagnosis is made on the specimen.
Pathology test reports must be retained for at least 10 years after the date of reporting. This means the report and the histopathology slide that generated it carry the same maximum retention floor — a deliberate alignment that enables retrospective review.
One complicating layer: state law can and frequently does exceed CLIA minimums. Illinois, for example, requires that cytology slides showing malignancy or pre-malignancy conditions, along with all abnormal slides and reports, be stored for 10 years from the date of examination — double the federal floor. Compliance officers managing multi-state laboratory networks must map each state’s rules against the federal baseline and apply the more stringent standard in each jurisdiction.
4. EPA Environmental Laboratories — Clean Water Act, SDWA, and TSCA
Environmental laboratories operating under EPA authority do not have a single unified retention rule. Requirements are program-specific and often method-specific.
Laboratories analyzing samples for Clean Water Act compliance — wastewater discharge monitoring under NPDES permits, for example — are governed by 40 CFR Part 136, which establishes approved analytical methods and associated holding times. Holding times and retention periods are method-dependent: some analytes require analysis within 24 to 48 hours of collection; others allow 28 days. The regulatory obligation is to analyze within the holding time and retain the chain-of-custody documentation and analytical records per permit requirements, typically three to five years.
Under the Safe Drinking Water Act, certified laboratories analyzing public water system samples must meet method-specific holding times and retain records for a minimum of 10 years for certain contaminants — particularly inorganic chemicals and radionuclides — or as required by the primary enforcement state, whichever is longer. States with primacy often impose stricter timelines.
For laboratories conducting Superfund-related analysis under CERCLA, sample documentation — chain-of-custody records, analytical data packages — must typically be retained throughout the life of the remedial action, which can span decades. The EPA’s contract laboratory program guidance recommends 10-year minimum retention for these datasets.
5. College of American Pathologists (CAP) Accreditation
CAP accreditation supplements, and in some respects expands upon, CLIA requirements. The CAP accreditation checklists — updated annually and developed with input from practicing pathologists — require that laboratories maintain a written specimen retention policy as a documented component of the quality management program.
CAP generally follows CLIA retention periods as its regulatory floor, but checklist requirements add operational teeth: the policy must be accessible to staff, the retention schedule must be demonstrably followed, and any disposal must be documented. Inspectors review actual disposal records, not just written policy. A policy that mandates two-year retention of routine patient samples but has no disposal log is a deficiency finding, because the lab cannot demonstrate the policy is operational rather than aspirational.
Disposal Documentation Requirements: Who Authorizes, What Gets Recorded
Disposal is where most retention programs break down. Labs that manage sample retention conscientiously often have no corresponding protocol for what actually happens when the clock runs out. That gap matters for two reasons: regulators and accreditation bodies treat undocumented disposal as equivalent to improper disposal, and chain-of-custody gaps in disposal records are among the most common findings during FDA pre-approval inspections.
Authorization hierarchy. For pharmaceutical cGMP samples, disposal authorization should flow from the quality unit — specifically, QA management with signature authority for batch record closure. The individual authorizing disposal should not be the same individual managing daily sample inventory, to maintain independence. Under GLP, the archive custodian is the administrative authority for disposal, but the Study Director whose study generated the specimens should be notified before any records or samples are destroyed, since the Study Director remains accountable for the integrity of the study data under 21 CFR Part 58.
For CLIA-regulated clinical labs, the laboratory director — a defined statutory role under 42 CFR Part 493 — holds ultimate responsibility for the specimen retention and disposal policy. The director does not need to personally authorize each disposal action, but the written policy they sign must specify who has delegated authority, under what conditions, and with what documentation.
Minimum documentation for disposal. Any disposal event — regardless of regulatory framework — should generate a record containing: sample identifier(s) and lot or accession number; sample type and volume or mass disposed; date of original collection or manufacture; applicable regulatory retention period and expiration date; date of disposal; method of disposal (autoclave, incineration, drain disposal with permits, hazardous waste manifest); name and signature of the individual authorizing disposal; name of the individual performing disposal if different; and reference to any waste manifest number if the sample was transported off-site.
This record must itself be retained. Disposal records for pharmaceutical reserve samples and GLP specimens should be kept for a period equal to the applicable retention period for the study or batch — effectively meaning the paper trail for what was destroyed must outlast the objects themselves.
Hazardous Waste Disposal: RCRA Obligations for Chemical and Biological Samples
Sample disposal intersects with environmental law the moment a sample exhibits hazardous characteristics under RCRA. The Resource Conservation and Recovery Act, codified in 40 CFR Parts 260–273, governs the management, transport, and disposal of hazardous waste — and laboratory samples are explicitly included.
Making the waste determination. Generators must make waste determinations for all materials before disposal, using either laboratory testing or documented generator knowledge based on Safety Data Sheets, process information, and raw material composition. This determination must be documented. A sample assumed to be non-hazardous — without a written basis for that assumption — creates liability exposure if EPA enforcement action follows.
Laboratories that generate hazardous waste are classified by volume: Large Quantity Generators (LQGs), Small Quantity Generators (SQGs), and Very Small Quantity Generators (VSQGs). The classification determines accumulation time limits, storage standards, reporting obligations, and training requirements. EPA’s Subpart K under 40 CFR Part 262 provides alternative requirements specifically tailored to hazardous waste generation patterns in academic laboratories, but commercial analytical and pharmaceutical labs operate under the standard generator framework.
The uniform hazardous waste manifest. Any LQG or SQG transporting hazardous waste off-site for treatment, storage, or disposal must use the EPA Uniform Hazardous Waste Manifest. This document travels with the waste from the point of generation to the licensed treatment, storage, or disposal facility. The generator retains a signed copy. Documentation of waste evaluations must be maintained for a period of three years from the date the waste was last sent to an on-site or off-site treatment, storage, or disposal facility.
Biological samples. Biomedical waste disposal is regulated primarily at the state level in the U.S., with no single federal framework governing all aspects. Most states follow guidance derived from CDC/NIH biosafety standards and require that regulated medical waste — including cultures, specimens, and sharps — be treated by autoclave or incineration before disposal, with treatment records maintained. Labs generating biological samples with potential infectious content should consult their state’s department of environmental quality or health for applicable rules, which vary substantially between jurisdictions.
Radioactive samples. Laboratories generating radioactive waste from research or clinical procedures must comply with NRC regulations under 10 CFR Part 20 and, where applicable, state radiation control programs operating under NRC Agreement State status. Disposal methods — decay in storage, licensed disposal, sewer disposal of low-activity isotopes — each have specific documentation requirements that sit alongside the sample retention obligations under CLIA or GLP.
How a LIMS Closes the Policy Execution Gap
A written retention policy, however well-constructed, has an execution problem: it depends on someone actively tracking individual sample expiry dates across potentially thousands of sample records, remembering to check them, and then following through on disposal documentation. In most laboratories, that is not a sustainable manual process.
A modern Laboratory Information Management System addresses this by treating the retention schedule as a system parameter rather than a calendar reminder.When a sample is logged, the applicable retention period — drawn from the sample type and governing regulatory framework — sets the expiry date automatically, a process that begins with sample tracking at the point of receipt. As samples approach and then pass their retention threshold, the system generates alerts, queues disposal workflows, and routes authorization requests to the designated approver.
Critically, the LIMS creates an audit trail at every step: when the sample was received, when retention was assigned, when disposal was authorized and by whom, and when it was executed. The disposal record is timestamped, linked to the original sample record, and cannot be deleted without a superseding entry — which is what an immutable audit trail means in practice.
For laboratories subject to 21 CFR Part 11 — the FDA’s electronic records and electronic signatures regulation — the LIMS infrastructure supporting retention and disposal must meet validation requirements. This means the system must be validated to its intended use, access controls must restrict modification rights, audit trails must be automatically generated and tamper-evident, and electronic signatures must bind the individual to the specific record at the specific time.
Labs managing multiple regulatory frameworks simultaneously — a contract research organization running both GLP studies and cGMP analytical services under one roof, for example — benefit most from a LIMS that allows retention rules to be configured by sample type and regulatory context, rather than applying a single default period across the board.
Building a Defensible Retention SOP
A retention and disposal SOP that will survive a regulatory inspection or accreditation audit needs to do three things that most policies do not.
First, it must map specific regulatory citations to specific sample and record types generated by your laboratory. A generic statement that “samples are retained per applicable regulations” is not a policy — it is an acknowledgment that you haven’t written one yet. Regulators will agree.
Second, it must name roles, not job titles. The individual authorized to approve disposal should be identified by their organizational role in a way that is traceable to the person who holds that role at any given time.
Third, it must connect the retention policy to the disposal documentation process. The most common deficiency is a retention schedule that ends at the expiry date — with no documented process for what happens next. A complete SOP includes the disposal authorization form, the disposal log, and the retention period for the disposal records themselves.
State law, individual permits, and contractual obligations with sponsors or clients can all impose requirements that exceed federal floors. The SOP should identify any such obligations and specify which standard applies.
The Bottom Line on Compliance Exposure
Retention and disposal compliance is one of those areas where the gap between policy and practice tends to widen gradually, without triggering any immediate alarm. Reserve samples accumulate past their disposal dates. Disposal happens informally, without a manifest. Waste determinations are made by assumption rather than documentation.
None of those practices become visible until an inspector arrives, a litigation hold is placed, or a product safety question surfaces years after a study concluded. At that point, the absence of records is not a minor cleanliness issue — it is direct evidence that the laboratory’s quality system failed to execute a basic legal requirement.
The regulations referenced in this guide are not aspirational standards. They are the actual, enforceable floors. Everything below them is exposure.
QISS LAB provides LIMS solutions built for regulated U.S. laboratories, with configurable retention scheduling, automated disposal workflows, and 21 CFR Part 11-compliant audit trails. Learn more about QISS LAB or schedule a demo to discuss how your retention SOPs map to your current system capabilities.
