Health Information Management

TIP: Check out new FAQs about disposing PHI

HIM-HIPAA Insider, March 9, 2009

The Office for Civil Rights (OCR), which enforces the HIPAA privacy rule, has posted a set of FAQs on its Web site related to the disposal of PHI.

Questions include:

  • What do the HIPAA privacy and security rules require of covered entities when they dispose of PHI?
  • May a covered entity dispose of PHI in dumpsters accessible by the public?
  • May a covered entity hire a business associate to dispose of PHI?
  • May a covered entity reuse or dispose of computers or other electronic media that store electronic PHI?

Read the full list of FAQs here.

Most Popular