However important it is that entities adhere to HIPAA privacy regulations while storing protected health information (PHI), it is equally important that they consider PHI security while moving from facility to facility and when disposing of PHI, according to an article on the Health IT Security website.
If a provider opts to scan in paper files to make the move easier, it is still critical that they understand the correct method for disposing of the paper files.
In the case of relocation, HIPAA mandates that these documents be adequately destroyed and not left behind or disposed of in a public receptacle.
For instance, the records should be shredded, burned, pulped, or pulverized so they are unreadable and cannot be reconstructed.