What do I need to do before allowing a vendor to take an electronic device that contains RI offsite for disposal or repair?We must have a Business Associate Agreement with a vendor before they may take an electronic device that contains PHI offsite for disposal or repair. Equivalent agreements such as Appendix DS are necessary when non-PHI RI is involved. Alternatively, please contact your local IT support group for information on how to securely erase UCLA Restricted Information from the device. | |
|
|
