Securely Shredding And Destroying Electronic Health Records

The destruction of electronic health records (EHRs) is a complex process that requires careful consideration to ensure compliance with legal and ethical obligations. Hospitals and healthcare providers must navigate a range of regulations, such as the Health Insurance Portability and Accountability Act (HIPAA) in the US, to safeguard patient information and maintain confidentiality. While HIPAA does not specify retention periods, it mandates the protection of patient information from unauthorized disclosure. This involves implementing appropriate administrative, technical, and physical safeguards for the privacy of medical records. With the increasing adoption of EHR systems, which offer benefits in efficiency, accessibility, and security, the destruction process must address the challenges of both digital and physical formats. This includes methods such as shredding, incineration, and overwriting files to ensure records are rendered unreadable, indecipherable, and irretrievable. The process must also be regularly audited to ensure compliance and avoid legal complications.

Hospitals often use third-party services to destroy records

Third-party records management providers offer secure destruction services, ensuring that medical records are destroyed in a compliant manner. These companies can provide off-site shredding services for paper records, transporting documents in locked containers and shredding them with industrial-grade equipment. They can also assist in destroying electronic records, such as by overwriting files in CRM software or exposing hard drives to magnetic fields.

Additionally, hospitals may utilise third-party storage facilities to securely retain medical records for the mandated retention period. These facilities can help maintain HIPAA compliance by storing health information in secure locations and providing access when needed. Once the retention period expires, these third-party providers can properly destroy the records, ensuring compliance with state laws and HIPAA regulations.

To ensure compliance and maintain patient privacy, hospitals should establish clear destruction policies and procedures. This includes selecting appropriate destruction methods, such as shredding, incineration, or degaussing for electronic media, to render records unreadable and indecipherable. A secure chain of custody should also be implemented to track records from collection to final destruction, reducing the risk of unauthorised access. Regular audits of the record destruction process are crucial to verify compliance with applicable regulations and internal policies.

By partnering with third-party specialists in records management and destruction, hospitals can focus on patient care while ensuring the secure and compliant handling of sensitive medical records. These third-party providers offer expertise in maintaining confidentiality, adhering to retention periods, and implementing secure destruction methods, alleviating the burden on hospitals and enhancing the protection of patient information.

Destruction methods must comply with HIPAA

While there are no specific HIPAA rules for the destruction of medical records, the HIPAA Privacy Rule requires covered entities to determine what steps are reasonable to safeguard Protected Health Information (PHI) during the destruction process. This includes paper and electronic medical records. The HIPAA Security Rule requires covered entities and business associates to develop and implement policies and procedures to facilitate the compliant disposal of electronic PHI and/or media on which it is stored. All members of the workforce involved in the destruction process, or who supervise others involved in the destruction process, must receive training on the PHI destruction policies and procedures.

The HIPAA medical records destruction rules relate to the safeguards covered entities and business associates must implement to ensure PHI and electronic PHI (ePHI) are disposed of compliantly. This includes clearing and purging electronic media, or destroying the media by disintegration, pulverization, melting, incinerating, or shredding. For example, laserdiscs and microfilms must be pulverized, tapes must be demagnetized, and DVDs must be cut into tiny pieces. For electronic records stored on a hard or external drive, the best chance of remaining HIPAA-compliant is to destroy the hard drive or expose it to a magnetic field.

HIPAA requires patient records be destroyed after a certain period to maintain confidentiality. PHI must be destroyed six years after creation or six years from their last use. However, some states have their own data retention laws, which may be longer than HIPAA's requirements. In this case, practices must follow the state's laws. It is important to note that some states have more stringent medical records destruction rules than HIPAA. If you are unsure which medical records destruction rules apply to your organization, it is recommended you seek professional compliance advice.

To maintain HIPAA compliance, organizations may choose to partner with a third-party records management provider to securely store and destroy medical records. These third-party providers can store health information in secure facilities, provide access when necessary, and perform secure destruction when the time is right.

Electronic records are often automatically deleted

The adoption of Electronic Health Records (EHR) systems has significantly impacted medical records retention over the last decade. EHRs offer numerous benefits in terms of efficiency, accessibility, and security over paper records systems, making them an invaluable tool for healthcare organizations. EHR systems can be programmed to automatically delete data after the retention period ends. The retention period for EHRs is typically six years after creation or six years from their last use.

However, it is important to note that while automatic deletion is a convenient feature of EHR systems, it may not always be 100% effective in removing all traces of the files from the hard drive. In some cases, deleted data may still be recoverable, which could pose a potential risk to patient privacy. To ensure complete destruction of electronic records, additional steps such as overwriting the files or exposing the hard drive to a magnetic field may be necessary.

Healthcare organizations should adhere to best practices and develop a comprehensive destruction policy that outlines the methods and processes for securely destroying electronic records. This includes selecting appropriate destruction methods that render the records unreadable, indecipherable, and irretrievable. Common methods for electronic media include shredding, incineration, and degaussing.

It is also crucial to establish a secure chain of custody procedure to track records from the point of collection to final destruction, ensuring accountability and reducing the risk of unauthorized access. Regular audits of the record destruction process should be conducted to verify compliance with the destruction policy and applicable regulations, such as the Health Insurance Portability and Accountability Act (HIPAA) guidelines.

Overall, the automatic deletion feature of EHR systems provides a seamless and efficient way to manage the retention and destruction of electronic health records. However, it is just one part of a comprehensive destruction policy that healthcare organizations should implement to ensure the secure and compliant handling of sensitive patient information.

Hard drives should be destroyed or exposed to a magnetic field

Hospitals must destroy patient health records after a certain period to maintain confidentiality and comply with HIPAA regulations. For electronic records, there are several methods of destruction. If a hard or external drive is used, the best way to destroy the health records is to destroy the hard drive or expose it to a magnetic field.

Exposing a hard drive to a magnetic field is a technique called degaussing. This method is used to erase data stored in a magnetic storage device, such as a hard drive, floppy disk, or magnetic tape. The process involves subjecting the media to a strong magnetic field, which effectively demagnetizes the data, making it unrecoverable.

To erase a hard drive with a magnet, an industrial magnet is required. Neodymium magnets, for example, can be used to erase data from hard drives, as they produce a strong magnetic field that can scramble the data. However, it is important to note that some have questioned the effectiveness of this method, as it may not work on all types of hard drives.

As an alternative to degaussing, physical destruction of the hard drive can be carried out through methods such as shredding, crushing, or disintegrating. This ensures that the data cannot be retrieved and is a popular method for destroying hard drives.

A destruction certificate is issued as proof of compliance

The destruction certificate is issued after the records have been securely destroyed, and the retention schedule is updated to reflect their disposal. The certificate includes details such as the date and location of destruction, as well as a witness signature, to avoid legal liabilities. This is an important step in the process of destroying medical records, as it helps to ensure compliance with regulations and protects the organisation from future legal complications.

The correct method for the retention and destruction of medical records depends on their format. For example, laserdiscs and microfilms must be pulverised, while tapes need to be demagnetised and DVDs cut into tiny pieces. Paper records should be shredded or otherwise destroyed so that the information they contain cannot be reconstructed.

For electronic records, there are several methods of destruction. If a practice uses a CRM software, the best way to remain HIPAA-compliant is to overwrite the files. If a hard or external drive is used, destroying the health records hard drive or exposing it to a magnetic field is the best option. Electronic media can also be physically destroyed through methods such as disintegration, pulverisation, melting, incineration, or shredding.

It is important to note that some clearing and purging techniques may not be 100% effective on modern hard drives, and deleted data may still be recoverable. As such, organisations should develop a written destruction policy outlining the methods and processes for secure destruction, as well as establish a chain of custody to track records from collection to final destruction. Regular audits of the record destruction process should also be conducted to verify compliance with the destruction policy and applicable regulations.

Frequently asked questions