HIPAA Compliant Recycling

What is HIPAA?

HIPAA, the Health Insurance Portability and Accountability Act, establishes security and privacy standards for the use and disclosure of “protected health information” (PHI) to ensure that patient data remains safe. The privacy rule requires that covered entities apply appropriate administrative, technical, and physical safeguards to protect the privacy of PHI in any form.

Failure to abide by these rules can result in hefty fines, not to mention patient lawsuits and bad publicity.

How does HIPAA affect computer recycling?

The HIPAA Security Rule requires that covered entities implement policies and procedures to address the final disposition of electronic PHI and/or the hardware or electronic media on which it is stored, as well as to implement procedures for removal of electronic PHI from electronic media before the media are made available for re-use.

Many assume this means to delete all patient files and sensitive information before removing computers from the premises. However, this task can be more difficult than it seems. Deleted PHI data can easily be recovered from hard drives — even if the drive has been reformatted.

Therefore, who you hire to recycle your computers and what they do with your equipment after it leaves your building can have a big impact on whether you stay in compliance with HIPAA rules.

How does PC Disposal handle data security?

PC Disposal offers a specialized solution called Secure Plus™ Risk Management Disposal. This solution adds an extra layer of security and is ideal for companies that store medical records and other highly sensitive data. PC Disposal properly retires computer hardware and takes special steps in the areas of security, legal compliance and accountability. Services include:

• Ship to you our PrivaCage™ secure equipment containers to keep your computers and data secure before and during shipment (optional).
• Pick up equipment directly from your loading dock.
• Destroy hard drives or thoroughly remove all data from hard disks using Department of Defense recommended methods (on-site service available).
• Recycle equipment according to state and federal environmental laws.
• Provide a certified report detailing the services performed and confirming software removal (listed by hardware serial number).
• Services are 100% HIPAA, HITECH, Gramm-Leach-Bliley, FACTA Red Flags Rule, GLBA, CCPA and EPA compliant.
• Services are backed by our $1,000,000 Guarantee.