164.310(d)(2)(i) Disposal (Required)
Physical safeguard · Required
The requirement as we hold it
Disposal (Required). Implement policies to address the final disposition of ePHI and the hardware or media on which it is stored. NIST recommends sanitization per SP 800-88 with certificates of destruction.
The examiner asks
- Show me how ePHI and the media it sits on are disposed of.
- Where is the certificate of destruction?
Evidence to bring
- the disposal procedure
- the destruction certificate
Source: 164.310(d)(2)(i) at eCFR. Our statement of the clause, not the instrument verbatim.