HIPAA Question

[Cannondella]

I realize this may not seem to be the exact right sub-forum but had a hard time finding a better one, sorry. For anyone well versed in HIPAA requirements for destruction/recycling of hardware I have a question. If Hard drives are removed from towers beforehand are there any other requirements on the rest of the case? Rest of the contents would include PC Tower, motherboard, ram, optical drive. There are no flash drives or removable drives of any kind connected. Do the machines need to be inventoried or destruction certified? or can we more or less call out any old recycling company to come dispose/recycle the cases? Thank you!

 

[groze]

I am just a consumer so I am no expert on this and I am not a lawyer. I would have your legal department research what you can and can not do. I have read HIPAA for myself. Each state may have additional laws and regulations in addition to Hippa.

 

[Keager]

Hospital IT worker here.

Hard drives must be destroyed, some say to flash the memory in printers, PC's and servers, but we have not done that. Usually just pull it out and keep the memory for other machines. The rest of the equipment does not matter, at least at the two hospitals I have worked at.