
HIPAA Disposal Checklist for IT Equipment
Retiring healthcare IT equipment is not as simple as unplugging old devices and sending them to storage. If a laptop, server, hard drive, SSD, tape, phone, or storage array contains protected health information, your organization still has a duty to protect that data during disposal. Under HIPAA, covered entities and business associates must use reasonable safeguards when disposing of PHI and electronic PHI. That means your disposal process should control access, remove or destroy data, document the outcome, and prove