SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-device-media-disposal

How must electronic media with ePHI be disposed of?

Dispose of it so ePHI cannot be accessed by unauthorized people.

Start playing free

  1. Keep all media forever
  2. Shred paper only
  3. Dispose electronic media to prevent unauthorized ePHI access ✔

Why: Device and media controls require procedures for final disposal of ePHI or the hardware and electronic media on which it is stored.

Huh, didn't know that: Secure disposal may include degaussing, secure wiping, or physical destruction.

The dad joke
Why did the old hard drive get shredded? It couldn't keep patient data to itself.
Like this card?
Play the game

References

Answer: Dispose electronic media to prevent unauthorized ePHI access. Device and media controls require procedures for final disposal of ePHI or the hardware and electronic media on which it is stored.

  1. 45 CFR 164.310(d)(2)(i) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.310
    Disposal (Required). Implement policies and procedures to address the final disposition of electronic protected health information
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsWhat is electronic protected health information, or ePHI?Work SkillsWho must comply with the HIPAA Security Rule?Work SkillsWhat are administrative safeguards in the HIPAA Security Rule?

That's stuff everyone should know.