When leases end, copier/MFP hard drives can walk out the door with ePHI. In this practical session, we translate HIPAA device/media controls into plain English and apply NIST SP 800-88 (Clear, Purge, Destroy) to everyday returns, swaps, and disposals. You'll see what to require from vendors, how to verify sanitization, how to document chain of custody, and where to file proof so you're audit-ready.

Key Topics:

• Choose the right NIST 800-88 method for copiers and MFPs.
• Demand proper documentation (method, verification, serials, chain of custody).
• Close policy gaps and retain proof for six years to satisfy HIPAA.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠
• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: November 4, 2025.