Statement of Policy

Washington University in St. Louis (WashU) is committed to conducting all university activities in compliance with all applicable laws, regulations and university policies. WashU has adopted this policy to outline the security measures required to protect electronic information systems and related equipment from unauthorized use.

Identify requirements for reuse or disposal of WashU systems containing protected or confidential information.

Protected and confidential information is required to be permanently rendered unrecoverable from all forms of media before it is disposed or reused. This is to prevent recovery of data by unauthorized sources.

The department, school or their contracted vendors are to store the media in a secure location prior to destruction. Destruction vendors must have a signed HIPAA BAA on file.

Title: Media Reuse and Disposal
Policy Version Number: 2.0
Creation Date: February 2, 2011
Applicability: Protected and Confidential
Reference Number: 03.06
Status: Final
Revision Date:  April 6, 2016
Policy Owner:  Information Security Office