Don’t let IV bags with protected health information trigger costly penalties

Why This Topic Matters

Improper disposal of protected health information can create privacy, security, and breach-notification risks for covered entities and their vendors. The topic is especially relevant for compliance teams, privacy officers, and practice managers responsible for day-to-day handling of records and materials that may contain patient information.

Article Sections

1. HIPAA

   Introduces the article’s focus on disposal of materials that may contain protected health information and the related compliance concerns under HIPAA.

2. HIPAA allows for options

   Summarizes general HIPAA and HHS guidance on disposal approaches and the kinds of safeguards organizations may consider.

3. Some methods more effective

   Discusses different disposal approaches and broader considerations about reducing exposure and breach risk.

4. Ensure vendor compliance

   Covers third-party disposal arrangements, business associate oversight, and related enforcement and legal considerations.

5. 8 tips to reduce practice risk

   Presents operational compliance topics such as policies, training, storage, vendor agreements, and timing of disposal.