Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Moving Equipment with ePHI

If equipment with ePHI is moved, it must stay within the secured facility or be moved to another secured facility. The following process is followed.

  1. A request to move equipment with dates and customer impacts is submitted to the HIPAA liaison.
  2. The HIPAA liaison works with the appropriate offices to ensure the schedule works for the customers impacted.
  3. If applicable, data is backed up using a unique encryption key known to the person making the backup and the HIPAA liaison.
  4. If leaving the secured facility, ePHI will be securely wiped and verified by the Security Office.
  5. The system will be powered-off and moved.
  6. The system will be restored and verified by system administrators.
  7. The ticket is closed by system administrators and an email is sent to the building manager, HIPAA liaison, and others involved in the ticket or workflow.

Sanitizing Media for Removal

...