#107 - Media Sanitization Playbook Copiers, MFPs & HIPAA Compliance
·39 min
Epi Compliance episode on media sanitization and HIPAA compliance in healthcare, hosted by Ray Walters with Jose Delgado Jr. A customer's experience—leasing a new copier without receiving destruction documentation for the old unit's hard drive—illustrates widespread compliance failure. The hosts explain that HIPAA, created in the 1990s before internet proliferation, applies to any device transmitting patient health information (printers, copiers, tablets, phones, medical machines). Destruction methods are flexible (shooting, magnetizing, shredding, melting, incinerating) per NIST guidelines, but documentation with signatures and before/after photos is mandatory. The hosts emphasize 'trust and verify'—accountability via documentation prevents liability shifting. They discuss leasing company responsibility, CRUD (Create, Read, Update, Delete) cycles, and emerging trend: healthcare printing declining as EHRs eliminate paper records and embrace digital patient intake. Technical solutions range from simple (hammer, refrigerator magnet) to sophisticated, but all require documented proof.
