For a health care facility to meet its record destruction needs, the certificate of destruction should include all but which element?

For a health care facility to meet its record destruction needs, the certificate of destruction should include all but which element?

• A. Patient notification
• B. Date of destruction
• C. Identity of the person performing destruction
• D. Destruction method

Answer: (A)

A certificate of destruction serves as an audit trail for secure disposal of PHI, showing who did the work, when it happened, and how the records were destroyed. This information is essential for accountability and for proving compliance with privacy and destruction policies. The date of destruction confirms when the records were disposed, helping ensure timing aligns with retention schedules and internal controls. The identity of the person performing destruction creates a clear line of responsibility, so an authorized individual can be held accountable if any questions arise. The destruction method documents how the PHI was rendered unreadable or unrecoverable, demonstrating that the data was disposed of securely in accordance with policy. Patient notification does not belong on the destruction certificate. It isn’t a standard part of the internal record of destruction and would add unnecessary or inappropriate information to the destruction log.

A certificate of destruction serves as an audit trail for secure disposal of PHI, showing who did the work, when it happened, and how the records were destroyed. This information is essential for accountability and for proving compliance with privacy and destruction policies. The date of destruction confirms when the records were disposed, helping ensure timing aligns with retention schedules and internal controls. The identity of the person performing destruction creates a clear line of responsibility, so an authorized individual can be held accountable if any questions arise. The destruction method documents how the PHI was rendered unreadable or unrecoverable, demonstrating that the data was disposed of securely in accordance with policy.

Patient notification does not belong on the destruction certificate. It isn’t a standard part of the internal record of destruction and would add unnecessary or inappropriate information to the destruction log.