Fact Check: Does HIPAA Specify a Shred Size for Document Destruction?

Fact checking is a crucial process that involves verifying the accuracy of reports and statements. It dates back to the 1850s with the rise of sensationalist newspapers. Inaccurate information can take various forms, such as propaganda, fake news, disinformation, and misinformation. When it comes to HIPAA (Health Insurance Portability and Accountability Act) requirements for document destruction, there are several misconceptions that need clarification. We’re going to untangle them for you.

Clarifying HIPAA Document Destruction Misconceptions

Fact #1: Misleading Advertising

Some companies promoting shredders or shredding services claim that only a specific “P-level” of shredders comply with HIPAA. While this claim may seem beneficial, it’s important to note that it’s subjective and not a direct reflection of specified HIPAA law requirements.

Fact #2: HIPAA’s Destruction Requirements

There’s a common belief that HIPAA mandates that shredding is the only acceptable method for destroying Protected Health Information (PHI) and Personally Identifiable Information (PII). Contrary to this belief, the HIPAA Security Rule primarily focuses on using appropriate safeguards to protect the privacy of PHI and PII. While shredding is widely considered to be the most effective destruction method, HIPAA doesn’t mandate shredding as the only acceptable means of destruction. Other methods like disintegration, pulverization, melting or incinerating are also acknowledged.

Fact #3: Clarification on Shred Size

Another misconception is that HIPAA specifies a particular shred size for shredding PHI and PII. Once again, this is inaccurate. HIPAA regulations emphasize that the destruction method must ensure that the PHI and PII is “essentially unreadable, indecipherable, and otherwise cannot be reconstructed” before disposal, without stating a specific shred size.

Additional Insights on HIPAA and Document Destruction

Fact #1: Protection of PHI and PII

HIPAA mandates the protection and eventual destruction of all personally identifiable information, emphasizing the significance of adhering to these regulations.

Fact #2: Consequences of Noncompliance

Noncompliance with HIPAA policies poses the risk of fines and possible loss of licensing, highlighting the importance of adhering to these regulations.

At Wiggins Shredding, we provide HIPAA-compliant shredding services that guarantee the protection and complete destruction of your PHI and PII. We offer a Certificate of Destruction as evidence that your documents have been shredded beyond readability and reconstruction, ensuring your peace of mind. To have your medical documents shredded, call us at 610-692-TEAR (8327) or complete the form on this page.