Case: Retention & Destruction Requirements for ePHI

A 45-year-old patient underwent an MRI scan for chronic headaches. The scan was stored in the hospital's PACS. The radiology department needs to ensure compliance with ePHI retention and destruction requirements. The department must decide how long to retain the MRI scan and when and how to securely destroy it.