HIPAA Security Regulation
Physical Safeguards: Storage and Disposal of Media
Additional physical safeguards must be in place with regard to storage and disposal of electronic storage media such hard drives, tapes, and CDs. You must of course follow your own facilities' specific policies and procedures regarding electronic media.
Examples may include:
- Storing ePHI on network hard drives only.
- Storing portable media such as CDs and tapes in a locked cabinet or room.
- Properly disposing of electronic media, by wiping or shredding data on hard drives, or physically destroying portable media such as tapes and CDs.