Does anyone adhere to hippa data secuarty policy's ???????

Thanks miked for your input
I agree there are no concrete policy's to follow the company doing it now is a very large non profit that charges them for every thing 10.00 a hard drive. They came to us looking for a new vendor I hope I can accommodate them if feasible.

Originally Posted by miked

I have done some reading in the past on HIPPA requirements and in my opinion the responsibly and how to accomplish the destruction is left to you and your client.

If the government regs were clear on what is acceptable for destruction it would be simple but being they are NOT specific it puts the onus on you and your client.

I believe that if you contact an insurance company that insures those held to the HIPPA regs you will find out if your procedures will be "good enough". In answering to the questions of hospital you want to do business with you I think you need to satisfy their insurance company and their lawyer. The problem for you is you don't know either's requirements.



If you are serious about this business you can also do some research on the companies who are doing this service now. Perhaps start with a search of the web sites of companies currently performing the destruction. I suspect that the earlier poster was correct having a bond in place that will cover you and the client. As far as the equipment a shredder for hard drives and ability to video record the destruction. You may need to work mobile so an employee of the client can verify the destruction. Good luck with it. Mike