I spoke with a Hipaa consultant today who advised me to remove any inactive patients from the database. It is my understanding that patients with a treatment history cannot be removed, only archived, which still leaves their PHI on the server. I would like to be able to offload these patients on to an external encrypted drive to mitigate this unnecessary risk.
Guest
Thank you for the suggestion.
