Data Backup and Storage

The last Physical Section task is Data Backup and Storage. This is an addressable task that requires agencies create a retrievable, exact copy of EPHI, when needed, before movement of equipment.

This is straight forward. Or is it? If you move a device that contains EPHI you must make a backup BEFORE it is moved. Simple enough. Now what about those laptops? They contain EPHI, they get moved. Here is where the addressable part comes in. It is not practical to do a backup of every laptop before each and every move. This is a reminder however, that nursing laptops contain EPHI and must be evaluated relative to the Security Rule tasks.