Generally, Protected Health Information (PHI) is any type of Individually Identifiable Health Information held or transmitted by UConn Health or its Business Associates, in any form or media. Electronic Protected Health Information (ePHI) is PHI that is received, maintained or transmitted in electronic form. All UConn Health workforce members must safeguard our patients’ PHI, which includes ePHI.

Safeguards include protecting PHI/ePHI in connection with its disposal. For example:

• Never place paper documents/printed materials containing patient information in trash bins, recycle bins, or other publicly accessible containers.
• Always use a secure shredder bin. If you do not have a secure shredder bin, contact your supervisor right away!
• Follow the procedures in the UConn Health Office of Logistics Management (OLM) Property Control Manual related to receipt, removal, storage, re-use and disposal of hardware and electronic media.
• Destruction of X-ray film is handled by OLM through the use of a Business Associate.
• Red Bag Waste must be placed in regulated medical waste bins and incinerated using secure methods.
• Certain documents and other materials containing PHI may be subject to record retention requirements. Generally, copies are not subject to these requirements. Contact the Office of Healthcare Compliance and Privacy (OHCP) or the Office of the General Counsel (OGC) for guidance.

For more information please review  Policy 2008-01- Disposal of Protected Health Information (PHI) and Disposal and Re-use of Hardware and Electronic Media Containing Electronic Protected Health Information (ePHI)

Questions? Contact the Office of Healthcare Compliance and Privacy – we are here to help!