The drives must be destroyed within the rules of HIPAA compliance. On page 24 those methods are outlined. All medical facilities that I work with require you to sign a HIPAA Business Associate Agreement to follow these rules. There is no cost, they will provide you with the paper work.
When I talk to a perspective client I have this document handy - a lot of people do not know the rules.
Some of our clients require onsite destruction. You will quickly pay for the device you purchase if you provide reasonable prices and good service.
Magnetic destruction devices (Degaussers) are easy to use and are relatively inexpensive. These also work for backup tapes. ***Degaussing any current generation hard disk will render the drive permanently unusable.
Bookmarks