IT Asset Disposition Resources for Healthcare
Healthcare organizations, and those institutions that handle personal health information, are under special obligation to protect the security of patient data as electronic storage devices are retired from use. In addition, in order to support the "do no harm" mission of the medical community, healthcare organizations also look to find environmentally responsible and safe disposal options for their IT equipment.
Cascade brings a wealth of experience in serving healthcare organizations across the United States and has been recognized by Healthcare without Harm as a Champion for Change. We recognize the unique needs of IT managers in the healthcare community and have developed programs and resources to enable you to implement compliant, secure and responsible IT Asset disposition solutions, while gaining the most value from your equipment.
Below are some resources available to assist you in developing an IT Asset Disposition strategy as well as links to other valuable sources of information.
| Summary of HIPAA/HITECH as it applies to IT Asset Disposition. This document provides details on important provisions in the law, resources to help healthcare organizations implement the law, and links to other resources |  |
 |
| Acceptance Guidelines for Healthcare Customers: Details on what Cascade can safely handle from medical facilities. Also, a template "Certificate of Decontamination" that can be used for identifying treatment of potentially hazardous electronic equipment. | |
|
| Sample IT Asset Control & Disposal Policy: This tool is helpful (and required by HIPAA) in creating standards and training for the organization in effective IT asset management and data security. | |
|
| HIPAA/HITECH Compliant Business Associate Agreement: Use this sample agreement for drafting the terms and conditions between HIPAA "Covered Entities" and "Business Associates" that potentially handle personal health information. | |
|
| Presentation - IT Hardware Retirement, Best Practices in Healthcare - Regulations, Risks and Rewards: Presentation by Cascade's CEO at PDS Tech Conference on September 15, 2011 | |
 |
| Sample Request for Proposals for IT Asset Retirement - Electronics Recycling Services: This is a comprehensive toolkit to help you ask the right questions to develop your ITAD business requirements and provides all of the elements to complete a Request for Proposals, including a pricing matrix, sample questions, timelines, baseline agreement, etc. | |
|
Additional References:
- Aaron Piotrzkowski, Cascade Compliance Coordinator, apiotrzkowski@cascade-assets.com.
- Cascade’s Data Security overview: http://www.cascade-assets.com/datasecurity.html
- American Recovery and Reinvestment Act of 2009, Title XIII, (One Hundred Eleventh Congress, 2009) http://frwebgate.access.gpo.gov/cgibin/getdoc.cgi?dbname=111_cong_bills&docid=f:h1enr.pdf
- Summary of the HIPAA Privacy Rule, (U.S. Department of Health & Human Services, 2006) http://www.hhs.gov/ocr/privacy/hipaa/understanding/summary/index.html
- Healthcare Without Harm: An international coalition of hospitals and health care systems, medical professionals, community groups, and others working together to implement ecologically sound and healthy alternatives to health care practices that pollute the environment and contribute to disease.
- Practice Greenhealth is the source for environmental solutions for the healthcare sector and lends support to create better, safer, greener workplaces and communities.
