(d)(1) Standard: Device and media controls. Implement policies and procedures that govern the receipt and removal of hardware and electronic media that contain electronic protected health information into and out of a facility, and the movement of these items within the facility.

The Device and media controls standard has four (4) Implementation specifications:

  • (i) Disposal (Required). I
  • (ii) Media re-use (Required).
  • (iii) Accountability (Addressable).
  • (iv) Data backup and storage (Addressable).
Series Navigation<< 164.316 Policies and procedures and documentation requirements164.312(e)(1) Technical safeguards – Standard: Transmission security >>