The storage unit should be locked and reasonably safe from fire and floods.
A version of this article was first published February 25, 2021, by HCPro's Revenue Cycle Advisor, a sibling publication to HealthLeaders.
Q: Is it permissible to store paper patient records in a public storage unit? If so, do the storage units need to use specific safeguards to be HIPAA compliant?
A: Yes, you may store paper patient records in a public storage unit if the records are secure. The storage unit should be locked and reasonably safe from fire and floods. You will also need a BAA with the storage company.
Editor's note: Mary D. Brandt, MBA, RHIA, CHE, CHPS is a healthcare consultant specializing in healthcare regulatory compliance and operations improvement.
She is also an advisory board member for BOH. This information does not constitute legal advice. Consult legal counsel for answers to specific privacy and security questions.
Opinions expressed are those of the author and do not represent HCPro or ACDIS. Email your HIPAA questions to editor Kevin Duffy at kduffy@hcpro.com.
Revenue Cycle Advisor combines all of HCPro's Medicare regulatory and reimbursement resources into one handy and easy-to-access portal. News is not just repeated from other sources. It is analyzed by our Medicare experts so professionals can comprehend any new rule and regulatory updates thoroughly. Learn more.
Photo credit: PASADENA, CA/USA - DECEMBER 20, 2015: Public Storage overhead view. Public Storage is a self-storage company in the United States. / Editorial credit: Ken Wolter / Shutterstock.com