45 C.F.R. 164.310(d)(1)Standard: Device and media controls

Implement policies and procedures that govern the receipt and removal of hardware and electronic media that contain electronic protected health information into and out of a facility, and the movement of these items within the facility.