Health Information Management

TIP: Check out new FAQs about disposing PHI

HIPAA Weekly Advisor, March 9, 2009

Want to receive articles like this one in your inbox? Subscribe to HIPAA Weekly Advisor!

The Office for Civil Rights (OCR), which enforces the HIPAA privacy rule, has posted a set of FAQs on its Web site related to the disposal of PHI.

Questions include:

  • What do the HIPAA privacy and security rules require of covered entities when they dispose of PHI?
  • May a covered entity dispose of PHI in dumpsters accessible by the public?
  • May a covered entity hire a business associate to dispose of PHI?
  • May a covered entity reuse or dispose of computers or other electronic media that store electronic PHI?

Read the full list of FAQs here.



Want to receive articles like this one in your inbox? Subscribe to HIPAA Weekly Advisor!

Most Popular

Related Articles