DM-16—Removal of PHI from Media

>Control Description

Organization removes electronic protected health information from electronic media if the media is made available for re-use.

Theme

Process

Type

Preventive

Policy/Standard

Data Management Policy

>Implementation Guidance

1. Ensure that a process is defined and documented for removal of Protected Health Information from electronic media if the media is made available for reuse. 2. Ensure that validation is done to ensure that no protected health information exists on the media before reuse.

>Testing Procedure

1. Inspect and validate that a process is defined and documented for removal of Protected Health Information from electronic media if the media is made available for reuse. 2. Inspect whether validation is done to ensure that no protected health information exists on the media before reuse.

>Audit Artifacts

E-DM-01

>Framework Mappings

Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.

HIPAA Security Rule
1

164.310(d)(2)(ii)

Ask AI

Configure your API key to use AI features.