Healthcare

Hospitals, clinics and care organisations replace devices that hold patient data: PCs, servers, medical equipment and phones. Often a mix of hard drives and SSDs.

What is asked

Health data is a special category of personal data under the GDPR. In the Netherlands, care organisations also work with NEN 7510 for information security. Both expect you to make sure that data cannot be recovered from discarded devices, and to be able to show how you did that.

Organisations with US ties may also meet HIPAA. Guidance from the US Department of Health and Human Services on disposing of media refers to the clear, purge and destroy methods of NIST SP 800-88.

Two kinds of media, two methods

Degaussing works on hard drives and tapes, not on SSDs and flash memory. A healthcare fleet therefore usually needs two methods: a degausser for magnetic media and physical destruction for solid-state media, for example the PD-5E with the SSD-1E insert.

For smaller volumes the compact HD-2XTE or the SPACESAVER, which combines degausser and destroyer in one housing, fits in an IT room. Record every device with SCAN-1X or IRONCLAD, so you have a certificate per serial number.

Destroying patient data in-house?

We help you choose equipment that fits your volume and your mix of media.