The business was contracted to provide the Hospital with x-ray digitizing, archiving and destruction services. The Hospital contracted with the company to digitize radiology x-rays. As part of the contract, the company was also required to destroy the original x-rays, jackets and physicians’ radiology reports in compliance with state and federal privacy laws once the x-rays were digitized.
A Certificate of Destruction was also called for once the x-rays and accompanying reports had been destroyed. The Hospital and the company signed a Business Associate Agreement as required by the Health Insurance Portability and Accountability Act (HIPPA).