Get rid of it securely to keep it private

The scope of these Best Practices includes personal health information in the custody of health information custodians as defined under PHIPA, and beyond ─ many of the practices described can be applied to the various personal information that organizations must dispose of securely. [...] A centralized model of internal destruction involves employees collecting records to be destroyed in a container at their desk, where it is securely collected and transported by a designated employee to the location of the destruction equipment within the organization.3 In a centralized program, it may be a prudent policy to have some records isolated from the program 3 Documentation of the destru [...] It is incumbent upon organizations to determine the destruction method that credibly implements their secure destruction policy requirements.4 Organizations must determine which destruction method is best suited to the classification of the record, taking into consideration cost and convenience as well as the sensitivity of the record.5 This determination will constitute the “approved methods of d [...] The policy should indicate the required fields in a Certificate of Destruction, whether produced by a secure destruction service provider or generated internally, and may include: • company name • a unique serialized transaction number •. the transfer of custody • a reference to the terms and conditions •. the acceptance of fiduciary responsibility •. the date and time the information ceased to ex [...] Commissioner, Ontario, Canada An organization may wish to determine whether satellite locations will provide the paper records and electronic media to be destroyed directly to the approved service provider, or whether the satellite should ship the media to the central arm of the organization.