Check out new FAQs about disposing PHI

Written by Reed Tinsley | March 9, 2009

The Office for Civil Rights (OCR), which enforces the HIPAA privacy rule, has posted a set of FAQs on its Web site related to the disposal of PHI.

Questions include:

  • What do the HIPAA privacy and security rules require of covered entities when they dispose of PHI?
  • May a covered entity dispose of PHI in dumpsters accessible by the public?
  • May a covered entity hire a business associate to dispose of PHI?
  • May a covered entity reuse or dispose of computers or other electronic media that store electronic PHI?

To review all FAQs, go here:

http://www.hhs.gov/ocr/privacy/hipaa/enforcement/examples/disposalfaqs.pdf

About the Author

Reed Tinsley CPA

This article is written by Reed Tinsley, a Houston, TX-based CPA with over 30 years of experience advising physicians and medical practices across Texas and the United States. Reed holds certifications as a Certified Valuation Analyst (CVA), Certified Healthcare Business Consultant (CHBC), and Certified Financial Planner (CFP), specializing exclusively in the healthcare sector. He is a published author, nationally recognized speaker, and trusted advisor to physicians on accounting & tax, practice management, and financial planning. Schedule a Free Consultation.

Have questions? I’m here to help.