When was the last time you updated your data and device destruction policy? If the answer is, "we don't even have one," your practice is not alone. But you do need to get to work. Planning for the destruction of data and devices that contain PHI is a critical component of privacy and security and important to managing financial and reputational risk. This episode explains how to fearlessly and successfully develop a policy, in five easy steps!