a. Create an inventory of the PHI to be stored. File the inventory separately from the stored PHI, in an on-campus location.
b. Put the PHI in containers designed for long-term storage (i.e., not shoe boxes or used campus mail envelopes). Containers should be closed securely for transport.
c. Label the boxes, files, discs, etc., so that specific PHI may be located and retrieved upon request. Encrypt electronic PHI when possible.
