SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-media-reuse-required

Before reusing a hard drive that held ePHI, what must happen?

The organization must remove ePHI before media reuse.

Start playing free

  1. Remove ePHI before reusing media ✔
  2. Sell old hard drives intact
  3. Reuse media without wiping

Why: Media reuse is a required implementation specification. Entities must remove ePHI from electronic media before the media can be reused.

Huh, didn't know that: Clearing or purging are common methods to make media safe for reuse.

The dad joke
Why did the reused hard drive feel clean? It went through a data scrub.
Like this card?
Play the game

References

Answer: Remove ePHI before reusing media. Media reuse is a required implementation specification. Entities must remove ePHI from electronic media before the media can be reused.

  1. 45 CFR 164.310(d)(2)(ii) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.310
    Media re-use (Required). Implement procedures for removal of electronic protected health information from electronic media before the media are made available for re-use.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsWhat is electronic protected health information, or ePHI?Work SkillsWho must comply with the HIPAA Security Rule?Work SkillsWhat are administrative safeguards in the HIPAA Security Rule?

That's stuff everyone should know.