Additional physical safeguards must be in place with regard to the storage and disposal of electronic storage media, such as hard drives, tapes, and CDs. You must follow your facilities' specific policies and procedures regarding electronic media. Examples would include:
- Storing ePHI on network hard drives only
- Storing portable media such as CDs and tapes in a locked cabinet or room
- Properly disposing of electronic media by wiping or shredding data on hard drives or by physically destroying portable media, such as tapes, CDs, or flash drives