Mock HIPAA Auditthe OCR examiner, before the exam

164.310(d)(2)(ii) Media Re-use (Required)

Physical safeguard · Required

The requirement as we hold it

Media Re-use (Required). Implement procedures for removal of ePHI from electronic media before the media are made available for re-use. NIST recommends purging or clearing per SP 800-88 categorization.

The examiner asks

Evidence to bring

Source: 164.310(d)(2)(ii) at eCFR. Our statement of the clause, not the instrument verbatim.

Run this pack against the rule