HIPAA Compliant Medical Record Shredding
Protecting the privacy of your patients and business are the two biggest reasons secure document destruction is needed in the Medical field. Due to the sensitive nature of the documents and records your business keeps, HIPAA has created strict guidelines to ensure no sensitive information is leaked during the process.
Cutters Document Destruction understands the risks involved when handling sensitive information. Our shredders follow strict guidelines to remain compliant with HIPAA and all local privacy laws to ensure the secure destruction of all confidential documents.
Secure Onsite Destruction
With our on-site shredding, the process is secure and convenient. Our shred technicians only handle the locked carts, so they never come into direct contact with the documents
HIPAA Compliant
Our shredding methods are established to comply with every HIPAA regulation and other local shredding laws to ensure sensitive documents are properly disposed
Low Price Guarantee
Our low price guarantee ensures we always have the lowest prices. We offer a 5% discount on any written quotes from competing shredding companies
Who Needs Medical Record Shredding?
Hospital / Health Clinic
Doctor's Offices
Dental Practices
Nursing Homes
Pharmacies
Emergency Services
How are Medical Records destroyed?
Our on-site shredding process removes any risk to you or your clients. We come to you with one of our mobile shred trucks then collect and destroy any sensitive documents right at your location. During the process, our trained technicians only handle the locked shredding containers. These locked storage bins are wheeled out to our mobile shred truck and swiftly disposed of. You don’t have to be concerned about transporting sensitive medical documents or any breaches of confidential information because they are destroyed before we even leave your location.
Medical Record Shredding FAQ
How much does a data breach cost?
According to the IBM 2019 “Cost of a Data Breach” report, the average cost of a data breach is $3.92 million. With the healthcare industry being the most costly and an average of $150 cost per record lost, it’s more important now than ever to securely dispose of confidential records.
How long does it take to contain a data breach?
The IBM 2019 “Cost of a Data Breach” report, estimates that the average time to identify and resolve a break can be nearly a year (279 days). Also important to note that it costs $1.2 million more if the lifecycle is over 200 days. Unfortunately, the average lifecycle of a breach is 314 days.
How many data breaches were there in 2019?
According to the 2019 MidYear QuickView Data Breach Report, there were nearly 4,000 breaches and 4.1 billion records exposed in the first 6 months of the year.
Of those breaches, there were more than 20 million Healthcare data breaches. This means that social security numbers, dates of birth and information were exposed or stolen.
What are HIPAA approved methods of destroying PHI (Protected Health Information)?
According to the FAQ about the disposal of PHI on Department of Health and Human Services website, there are a few ways to properly dispose of your documents that meet the requirements.
- Paper records – Shredding , burning, pulping or pulverizing are acceptable ways to dispose of records because it makes them unreadable and impossible to piece back together.
- Electronic & Digital Media – Things like hard drives require degaussing or exposure to strong magnets. It’s also acceptable to have them shredded, pulverized or melted.
What are the penalties for HIPAA violations?
For healthcare organizations who violate HIPAA, the penalties can be severe. There are four tiers of civil penalties:
Tier 1 – $100-$50,000 per violation (MAX $25,000 per year)
Unaware of the violation even after exercising due diligence and wouldn’t know there was a violation.
Tier 2 – $1,000-$50,000 per violation (MAX $100,000 per year)
There’s reason to believe the organization knew or should’ve known they were violating rules.
Tier 3 – $10,000-$50,000 per violation (MAX $250,000 per year)
This is when there was willful neglect of HIPPA regulations but the violation was corrected within 30 days of being discovered.
Tier 4 – $50,000 per violation (MAX $1.5 million per year)
Willful neglect and the organization makes no effort to correct the violation within 30 days of being discovered.
Source: https://www.hipaajournal.com/civil-penalty-for-knowingly-violating-hipaa/
