SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-paper-disposal-privacy

Which HIPAA rule covers safe disposal of paper records with PHI?

The Privacy Rule, because the Security Rule covers only electronic PHI.

Start playing free

  1. The Security Rule
  2. No HIPAA rule covers paper
  3. The Privacy Rule ✔

Why: The Security Rule applies to ePHI, not paper. The Privacy Rule still requires appropriate safeguards, which include secure disposal of paper PHI.

Huh, didn't know that: Shredding or secure disposal bins are common safeguards for paper records.

The dad joke
Why did the paper medical record go through the shredder? It wanted a secure retirement.
Like this card?
Play the game

References

Answer: The Privacy Rule. The Security Rule applies to ePHI, not paper. The Privacy Rule still requires appropriate safeguards, which include secure disposal of paper PHI.

  1. 45 CFR 164.530(c) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-B/section-164.530
    A covered entity must have in place appropriate administrative, technical, and physical safeguards to protect the privacy of protected health information.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsDoes HIPAA protect patient information that is spoken out loud, or only paper and computer records?Work SkillsA hospital's HR office keeps Dana's pre-hire physical in Dana's personnel file, as the employer. Is that file PHI?Work SkillsFor how long after a person dies must a covered entity keep protecting that person's health information?

That's stuff everyone should know.