Q&A: Patient records in public storage units

Q: Is it permissible to store paper patient records in a public storage unit? If so, do the storage units need to use specific safeguards to be HIPAA compliant?

A: Yes, you may store paper patient records in a public storage unit if the records are secure. The storage unit should be locked and reasonably safe from fire and floods. You will also need a BAA with the storage company.

Editor's note: Mary D. Brandt, MBA, RHIA, CHE, CHPS is a healthcare consultant specializing in healthcare regulatory compliance and operations improvement. She is also an advisory board member for BOH. This information does not constitute legal advice. Consult legal counsel for answers to specific privacy and security questions. Opinions expressed are those of the author and do not represent HCPro or ACDIS. Email your HIPAA questions to editor Kevin Duffy at kduffy@hcpro.com.