Subscribe to my blog
Written by Reed Tinsley | March 9, 2009
The Office for Civil Rights (OCR), which enforces the HIPAA privacy rule, has posted a set of FAQs on its Web site related to the disposal of PHI.
Questions include:
- What do the HIPAA privacy and security rules require of covered entities when they dispose of PHI?
- May a covered entity dispose of PHI in dumpsters accessible by the public?
- May a covered entity hire a business associate to dispose of PHI?
- May a covered entity reuse or dispose of computers or other electronic media that store electronic PHI?
To review all FAQs, go here:
http://www.hhs.gov/ocr/privacy/hipaa/enforcement/examples/disposalfaqs.pdf
