Orange County NC Website
Browse       Search
systems. In other words, information security at the backup storage location must equal <br /> or exceed the security where the primary computers and servers are located. <br /> 3. North State Medical Transport may electronically backup PHI to a cloud server if North <br /> State Medical Transport obtains a business associate agreement from the server agency <br /> and all PHI is maintained in a manner that enables North State Medical Transport to <br /> meet is HIPAA compliance obligations. <br /> Data Retention <br /> 1. Full system backups will be copied and/or archived. <br /> 2. Archived backups must be periodically tested to ensure that they are recoverable. <br /> Documentation <br /> The backup restore and recovery processes must be documented by the HIPAA <br /> Compliance Officer. <br /> Storage of Media Other Than Backups <br /> Old hard drives or other media storage devices that have been removed from the <br /> information system will be handled as follows: <br /> 1. If the device is to retain PHI, it will be stored in the same fashion as the backup devices. <br /> 2. If the device is to be taken out of service and no longer used to store PHI, it shall be <br /> "sanitized" and erased prior to disposal in accordance with North State Medical <br /> Transport's "Policy on Physical Security of PHI and e-PHI." <br /> Emergency Contact information <br /> North State Medical Transport will maintain a list of designated staff to be contacted in <br /> an emergency. A copy of this list will be kept in a secure location at the main facility and the off- <br /> site backup location (if applicable). The list must be kept up to date and readily accessible in <br /> case of an emergency. The list will also include vendor contact and support information and <br /> contacts for the off-site media storage location. <br />