Orange County NC Website
Browse       Search
Policy 30: Policy on Creating Backups Creating Backups of e-PHJ <br /> North State Medical Transport <br /> Policy on Creating B s of e-PHI <br /> Purpose <br /> The Health Insurance Portability and Accountability Act of 1996 ("H|PAA") requires <br /> North State Medical Transport to back up and preserve all e-PHI created, received, used, and <br /> stored by North State Medical Transport in the event of an emergency or disaster. This policy <br /> outlines the procedures for preserving and protecting e-PHI and other important business <br /> information from tampering, theft, fire, flood, and other physical damage. Key to this process <br /> is the proper replication of exact copies of data in a secondary system so that if the primary <br /> system fails,the data will be completely preserved and accessible. <br /> Scope <br /> This policy applies to all e-PHI created, received, maintained or transmitted by North <br /> State Medical Transport. Creating backups will be the responsibility of the manager in charge <br /> of the particular electronic equipment for his/her area of responsibility, in close coordination <br /> with the HIPAA Compliance Officer. This policy applies to all electronic equipment and devices <br /> that are used to create, receive, maintain or transmit e-PHI at North State Medical Transport. <br /> This policy applies to all staff members and vendors or contracted parties who are responsible <br /> for completing backups of North State Medical Transport's e-PHI. <br /> Procedure <br /> Physical Access Controls <br /> 1. All backup systems will be located in a secure area, with limited access so that only <br /> those with responsibility for the backup system will have access to it. <br /> 2. Servers, backup drives and other data and information saving hardware will be located <br /> in a locked room. <br /> 3. Only authorized parties will have access to a physical location where backup devices are <br /> stored. <br /> Backup Schedule <br /> 1. Data and information stored on any computers or electronic devices will, at a minimum, <br /> be backed up at sufficient intervals to ensure that critical data (especially PHI) can be <br />