Does corporate email containing conversation of PHI for a covered entity fall under the 6 year HIPAA retention requirement? Refer to §164.530 (j)(2) HIPAA Administrative Requirements
I'm thinking the 6 year HIPAA retention policy applies to the Electronic Health Record (EHR) that would be found...