112
InformatIon SecurIty PolIcy DeveloPment for comPlIance
164.310(d)(1)
Device and Media Controls: Implement policies and procedures that
govern the receipt and removal of hardware and electronic media
that contain electronic protected health information into and out of a
facility, and the movement of these items within the facility.
164.310(d)(2)(i)
Disposal (R): Implement policies and procedures to address the nal
disposition of electronic protected health information and/or the
hardware or electronic media on which it is stored.
164.310(d)(2)(ii)
Media Reuse (R): Implement procedures for removal of electronic
protected health information from electronic media before the media
are made available for reuse.
164.310(d)(2)(iii ...