Advantage Business Systems, Xerox Northeast

What copier does a medical office need?

HIPAA-aware copier specification for medical practices: hard drive encryption, secure release, scan-to-EHR workflows and end-of-lease data destruction.

What's actually going on

Every modern copier has a hard drive that retains images of what it has scanned, copied and printed. In a medical practice, that drive holds protected health information.

The compliance exposure is largest at the end of the lease, when a machine full of patient records leaves the building.

Day to day, the workflow that matters is scanning into the practice management or EHR system, not printing.

What to do in the next 48 hours

  1. 1Confirm the device supports drive encryption and image overwrite, and that both are enabled at install, not just available.
  2. 2Enable secure print release so patient documents are not left in output trays.
  3. 3Specify scan-to-folder or direct integration with your EHR and test it with real chart workflows before sign-off.
  4. 4Get the end-of-lease data destruction process in writing now, including whether you receive a certificate of sanitisation.

The honest tradeoffs

  • Encryption and overwrite add a small performance cost and no meaningful money. There is no good reason to skip them in a practice.
  • Purchasing the hard drive outright at end of term guarantees the data never leaves, but adds a few hundred dollars per device.

Your next step

Rather just talk it through with someone local?

203-777-0011Or request service

Questions people ask next

Do copiers store patient information?
Yes. Networked multifunction devices write scanned, copied and printed images to an internal drive. In a medical setting that constitutes protected health information, which is why encryption, image overwrite and documented end-of-lease sanitisation matter.
What happens to copier data when the lease ends?
It leaves with the machine unless you act. Arrange a certified drive wipe or drive removal before pickup and obtain written confirmation. Some practices purchase the drive outright at end of term so it never leaves the building.

More on a copier I have to choose

Back to all situations