Check out new FAQs about disposing PHI

The Office for Civil Rights (OCR), which enforces the HIPAA privacy rule, has posted a set of FAQs on its Web site related to the disposal of PHI.

Questions include:

  • What do the HIPAA privacy and security rules require of covered entities when they dispose of PHI?
  • May a covered entity dispose of PHI in dumpsters accessible by the public?
  • May a covered entity hire a business associate to dispose of PHI?
  • May a covered entity reuse or dispose of computers or other electronic media that store electronic PHI?

To review all FAQs, go here:

http://www.hhs.gov/ocr/privacy/hipaa/enforcement/examples/disposalfaqs.pdf


Have questions? I’m here to help.