Additional physical safeguards must be in place with regard to storage and disposal of electronic storage media, such as hard drives, tapes, and CDs. You must of course follow your own facilities' specific policies and procedures regarding electronic media.
Examples may include:
- Storing ePHI on network hard drives only.
- Storing portable media such as CDs and tapes in a locked cabinet or room.
- Properly disposing of electronic media by wiping or shredding data on hard drives, or by physically destroying portable media, such as tapes and CDs.
