HIPAA

When most people think about HIPAA compliance, they think about electronic health records, patient portals, and hospital data security systems. They do not think about the red biohazard bags in the back of a medical waste truck. But HIPAA's reach extends much further than most haulers realize, and operating outside its requirements creates legal exposure distinct from DOT and EPA compliance obligations. If your business transports, handles, or destroys materials that contain

HIPAA 2026: Key Takeaways Business Associate Status: Medical waste transporters are legally classified as Business Associates (BAs) in 2026 and must sign BAAs. Digital Chain of Custody: Paper manifests are no longer sufficient; 2026 standards require digital, encrypted tracking of all waste containing PHI. Mandatory Risk Assessments: You must conduct a thorough HIPAA risk assessment annually or whenever you update your logistics software. Encryption at Rest & Transit: All