Ssn spring '17 final

Volume 14, Issue 1

spring 2017

Security Shredding News Serving the Security Shredding & Records Storage Markets

Visit us online at www.SecurityShreddingNews.com

ATTN: READERS !

Are you looking for Products, Equipment or Services for your business? If so, please check out these leading companies advertised in this issue:

Collection & Storage Containers Bomac Carts – pg 9

Equipment Financing TransLease Inc – pg 2

Lock & Locking Systems Lock America Intl. – pg 3

Mobile Truck Shredders

Alpine Shredders Ltd – pg 6 Shred-Tech Limited – pg 8 Vecoplan, LLC – pg 12

Moving Floor System Keith Manufacturing – pg 5

Stationary Shredders & Grinders Shred-Tech Limited – pg 8 Vecoplan, LLC – pg 12

Trade Associations NAID/Shred School – pg 7

(National Association of Information Destruction)

Trade shows Healthcare Waste Conference – pg 11

Website design Chachka – pg 9

Shredding operations have developed a bad reputation over the years for posing danger to workers and being ripe for regulator violations.

An industry shredding expert describes some of the essential safety elements needed for a modern shredding operation in any recycling operation.

The

Safe Way is the

Only Way

By Rafael Reveles

R

unning a shredder efficiently at a recycling facility has never been harder. Difficulties are tied to an increase in regulations, higher energy costs, increasing operational costs and lower commodity prices in some industries.

Although many new shredding technologies and approaches are available to operators to help them overcome challenges in this area, it’s also critical to bring innovation and investment to the safety procedures associated with these machines. Ultimately, the discussion around shredding systems is not just technical or procedural – it also has a moral component.

Nobody should have to learn that a family member or loved one is coming home from the facility with a serious injury – or that the worker is not coming home at all.

We as an industry know better and can do better when it comes to shredder safety. To help lift the dialogue on this point, the following article will provide a detailed look at the specific danger zones that exist in the shredding realm and offer best practices on how to make sure threats like fire, crushing, electrocution and others are minimized to the maximum.

Moving materials mindfully

W

hile there are many shredder specific risks associated with operations and maintenance, the employees that may be facing danger most often are those operating mobile equipment in support of the shredding line. A poor or congested facility layout can lead to a higher chance of vehicle collisions, pedestrian accidents or exposure to falling or ejected material from the shredding system.

To avoid those issues, pedestrians should be routed to specific pathways with railings to isolate their interaction with moving vehicles and equipment. Appropriate signage and site policies must support such separation.

Likewise, vehicles need rules of engagement for areas in which they operate. For example, a tall feed conveyor may have pieces hanging or falling off. “No-go” zones are needed to ensure vehicles don’t end up in danger zones around the equipment. Some operations will use large material handlers and grapples that have their own extra considerations. These vehicles can have risks such as dropping material too far from target accidentally, tipping over due to Continued on page 3

®

Specialist in Mobile Shred Truck Financing • LOW INITIAL INVESTMENT • LEASE OR LOAN FINANCING • FINANCING NEW OR PRE-OWNED EQUIPMENT

• SIMPLE APPLICATION PROCESS • SERVING THE U.S. & CANADA • COMPETITIVE RATE STRUCTURE

We Provide a Convenient and Cost-Effective Solution!

Financing The World Of Transportation For a Quote or More Information Contact: Eastern States Western States Terry Lee Cassie Bergo Direct: 303-301-7651 | Cell: 937-620-9400 Direct: 303-301-7685 | Cell: 303-324-8340 tlee@transleaseinc.com cbergo@transleaseinc.com

www.transleaseinc.com WWW.TRANSLEASEINC.COM 2 Security Shredding News Spring 2017

Security Shredding News

The Safe Way is the Only Way Continued from page 1

operator error and being hit by pile storage slides. These material handlers should have dedicated positions, properly designed conveyorloading zones, designated clear spaces, and extra operator training for proper safety performance.

Lock-out logistics

L

ock-out-tag-out procedures and training specifics are part of federal Occupational Safety and Health Administration (OSHA) requirements (29 CFR 1910.147) when it comes to operating most shredding equipment. This essential safety procedure involves isolating the power or energy to the shredder or associated equipment prior to performing maintenance.

Operators must also document the specific LO/ TO procedures for each piece of equipment and train any affected individuals.

An example of this type of safety activity can be seen at the infeed conveyor to a shredder – it will likely need isolation when maintenance activities are planned for within the shredder chamber. Such steps ensure material cannot fall on anyone in the area inadvertently. The LO/ TO points must all be clearly labeled and have a proper hasp to accept an approved locking device. Procedures should also include steps that test the effectiveness of the lock-out prior to work commencing. It is important to note that other forms of energy besides electrical may also require isolation – air, hydraulics and stored energy are examples.

While a good training program and a company culture of “safety first” can bolster the effectiveness of a LO/TO program, opportunities for human error may still remain. Adding secondary systems to high danger zones, such as shredder chambers, can be an inexpensive investment with high safety rewards.

Also, limit-switch sensors on doors are common on many shredder and baler access doors, but it is important to have a harder-todefeat model with a coded magnetic non-contact switch to make it difficult to fool the sensor. In addition to a door sensor switch that does not permit shredder operation when an access hatch is open, a captive sequential key interlocking system is another inexpensive investment to help prevent the unthinkable.

These captive key systems work by having a special key in the control panel that is needed to open the shredder hatch. Once the key is removed, control power for the shredder is interrupted rendering a non-operable state. The key is then taken to the shredder door, where it must be inserted and turned to allow another special key to be released from the latch. The operator then takes the released key into his or her possession during maintenance while the key that came from the control panel is held captive in the open latch until the door is closed and the

key from the maintenance operative is replaced.

These additional levels of safety should be seen as insurance policies and absolutely are not a substitute for a robust LO/TO program.

Now Even More Options for Customers Who Want Their Own Key Codes!

Lock America Adds More New Key Codes for Padlocks and Console Locks.

• Give your drivers and customers a single key that fits all the locks at a site.

• Ask your console or bin supplier for new available key codes, or contact Lock America directly.

On guard

M

uch like LO/TO, the guarding of machinery is specified in local and federal regulations (29 CFR Part 1910, Subpart O) and is also enforced by OSHA. Guard devices are required to isolate employees and visitors from moving parts than can pinch, crush, cut and cause other types of injuries. For example, an expanded metal guard covering a rotating shredder drive shaft must be present and placed in a specific location.

In addition, conveyors generally require belly pans or return roller guards, and they too are covered by a specific OSHA standard (29 CFR 1926.555). Machine guards should be affixed in such a way that specific tools are required for removal. Some manufacturers will add limit switches to critical guards, a safeguard that will not allow the system to run when guards are not in place.

Even though a site may have exceptional guarding, the unexpected can still happen, which is why multiple emergency stops should be spread throughout a shredding system. These “e-stops” are another inexpensive addition that can minimize safety threats and enable faster response to a system backup, jam or fault.

Not all e-stops are created equal, however, and systems should follow governmental guidelines.

The best units have redundant contacts and are also monitored to allow notification to the operator of which section of the plant has been stopped – this reduces downtime in the long run in larger plants where it may take time to realize which e-stop has been activated. If the e-stop cord or button is going to be moved, it is important that a qualified safety professional evaluate the risk and effectiveness of any modifications.

The maintenance factor

M

any accidents in the shredding industry unfortunately happen with maintenance staff or contractors working on the equipment.

At the same time, many accidents can occur because equipment has not been maintained properly. Examples of maintenance-related hazards can be hydraulic hose breaches due to abrasion, fires caused by leaking oil, shorts and arc flashes due to loose connections, and pieces falling or breaking off a machine.

Besides having a documented preventative maintenance program that meets manufacturer specifications, experts also recommend a TPM (total productive maintenance) program and Continued on page 4

One Key Can Now Operate All Your Locks!

Tel: (951) 277-5180 Fax: (951) 277-5170 www.laigroup.com

800-422-2866

9168 Stellar Court Corona, CA 92883 sales@laigroup.com

PUBLICATION STAFF Publisher / Editor Rick Downing Contributing Editors / Writers Rafael Reveles • Sandy Woodthorpe Production / Layout Barb Fontanelle • Christine Pavelka Advertising Sales Rick Downing Subscription / Circulation Donna Downing Editorial, Circulation & Advertising Office 6075 Hopkins Rd., Mentor, OH 44060 Ph: 440-257-6453 • Fax: 440-257-6459 Email: downassoc2@oh.rr.com www.securityshreddingnews.com For subscription information, please call 440-257-6453 Security Shredding News (ISSN #15498654) is published bimonthly by Downing & Associates. Reproductions or transmission of Security Shredding News, in whole or in part, without written permission of the publisher is prohibited.

Annual subscription rate U.S. is $19.95.

Outside of the U.S. add $10.00 ($29.95).

Contact our main office, or mail-in the subscription form with payment.

©Copyright 2017 by Downing & Associates Printed on Post-Consumer Recycled Paper

Security Shredding News Spring 2017

3

Security Shredding News

The Safe Way is the Only Way Continued from page 3

associated boards. TPM systems generally delegate simple inspection or low-risk tasks to operators or maintenance helpers. Examples include inspection of a hydraulic power unit for leaks, checking the oil level in a sight glass, greasing certain items and checking belt tracking. Inspection sheets can be located on multiple small boards throughout the plant and are typically reviewed by management daily. Overall, TPM programs can remove some load from a maintenance team and enable those specialists to focus on more urgent tasks.

Developing metrics to measure preventative maintenance percentage of timely completion and mechanical availability can also be a good enabler to a long-term theme of effective maintenance.

Poor procedures or lack thereof can lead to unsafe conditions when staff members are working on their shredding systems. One of the most prevalent issues is lifting and rigging, since most parts on a shredder will be heavy – anyone performing a lift should be properly trained in techniques.

Certain items to focus on are appropriate load rating and inspection of rigging, planning lifts and respecting the lifting capacity of the crane or lifting device, reviewing the ground conditions for a level and stable lifting base, and isolating the area from pedestrians. A stunning example of the need for training is that of the common lifting threaded eye bolt: This critical component may lose up to 70 percent of its rated strength when a load is applied at angle that is 45 degrees of vertical. A better choice in this case would be swivel hoist rings, which are rated at full listed capacity for all 180 degrees of load applied.

Many departments often decide to fabricate their own jigs and special tools for lifting certain elements and wear parts. Take care to ensure a professional engineer has verified their safe lifting ability or has sourced them from the equipment manufacturer. In addition, keep in mind that high elevation areas may require man lifts for maintenance activities such as belt, bearing and motor changes. Adding maintenance access platforms during the system-design phase can reduce accident risk as the team will be able to access elevated areas more stably.

Lastly, use care to ensure OSHA confined-space policies are applied and followed properly. A shredder interior is usually in this category and requires extra protocols when accessed – important aspects to consider include an escape plan, extra PPE, and an air monitoring device.

Steps for fire prevention

F

ires are prevalent in the recycling industry for a variety of reasons – worn shredders, inappropriate material in the feed and heat buildup are just a few. Fortunately, many new technical solutions exist to prevent and suppress blazes caused by these situations. However, preemptively undertaking a fire-response plan can illuminate potential gaps when it comes to fire department access, ample water supply, bulk-storage standards for piles, and fire water runoff capture strategies. Operators may even consider inviting the local fire department for a walk-through.

Whether after hours or during operation, new types of infrared monitoring services or special multi-band flame detectors can save a facility.

A larger footprint operation may benefit from a monitoring company that uses advanced cameras and software to detect smoke and heat and call the fire department. Smaller companies or those that need to directly monitor the shred line hoppers – tire shredding operations, for example – may want to invest in a packaged system with flame and heat detectors that initiate specific actions, such as shutting down the line, applying water to specific zones and sounding audible alarms.

Also keep in mind that certain machine faults can cause fires. For example, a high-pressure hydraulic line breach could atomize hot oil or an over-temp bearing may ignite grease or surrounding materials. In the case of hydraulics, oil-tank-level sensors can effectively be used to shut down the system if rapid oil loss occurs, and a simple bi-metallic heat detector can also safely shut down hydraulics. Some insurance companies may even

4 Security Shredding News Spring 2017

recommend special hydraulic oils that are less prone to flash fires.

Finally, developing a plan B for handling fires is prudent and not always expensive. A minor investment in a portable foam cart or just extra extinguishers can absolutely pay off.

Electrical safety

O

ne of the most serious safety risks in any shredding operation will be the electrical supply and systems. Most shredders run on higher voltage, three-phase power at or over 480 volts. This level of power can cause violent explosions known as arc flash events and are almost always fatal. These events can be caused by something as simple as an employee accidentally dropping a tool or cover into an open electrical enclosure. The dropped metal item may connect several phases or phase to ground, creating a short and the associated explosion.

Furthermore, when an employee is shocked by high voltage, death can occur due to the incredible current that will flow through. Thus, staff must be qualified to properly and safely troubleshoot and access panels. Under no circumstances should individuals work on live panels or switchgears without following OSHA and National Fire Prevention Association standards for arc flash PPE – these standards call for special suits and visors. Investing in a qualified electrician when repairs are needed is a good safety investment.

In addition, anyone who works on the electrical gear can be put at risk if the panel and source labeling are not accurate. Each panel should have proper labeling, and the labels should note any circumstances where multiple sources of voltage are present in the same enclosure. As mentioned earlier, proper machine maintenance is a must, and this would include inspecting for loose conduit and connections. One effective method: Contract an inspection company to use infrared thermography to scan loaded switchgear for temperature differences. These scans can show hot spots which indicate loose or poor connections and other issues that can be proactively repaired.

Safety comes from the top

M

ost of the scenarios highlighted in this article have simple and inexpensive remedies. Such safety steps include vetted procedures, comprehensive training, scanning, bolt-on devices, best maintenance practices and some modern engineering controls.

Higher level investments such as maintenance platforms and flame detectors can be budgeted for and integrated into an operation over time.

However, none of these techniques and devices can substitute for a topdown company culture of a safe work place.

This is not a trivial journey. Company cultures are developed over time based on what is allowed and expected. I urge you to make safety your top priority. It is a prerequisite for success in our industry – and is simply the right thing to do for the employees that underpin every operation.

Rafael Reveles is an engineer and president of Converge Engineering (the recently launched engineering services business of Sims Recycling Solutions). He has 17 years of experience designing and building e-scrap and metals processing systems and can be contacted at rafael. reveles@convergeengineering. Find out more about Converge at www. convergeengineering.com.

This story originally ran in the December 2016 edition of E-Scrap News magazine and was adapted from a presentation the author gave at the 2016 E-Scrap Conference. The author and other IT asset disposition leaders will be on hand at the 2017 E-Scrap Conference, to be held Sept. 18-20 in Orlando, Fla. Get more information at e-scrapconference.com.

Security Shredding News

www.youtube.com/user/KeithMfgCo

www.keithwalkingfloor.com

Security Shredding News Spring 2017

5

Security Shredding News

Preliminary European Recyclable Paper Numbers Released

A

REBNews.com article presents the latest figures compiled by the Confederation of European Paper Industries (CEPI), based preliminary membership statistics for 2016.

CEPI estimates put recyclable paper supplies at 43.2 million tonnes for 2016, a volume that is 0.3 percent lower than the year before. The diminished supply is not thought to have hurt paper and board production, which decreased by only 0.1 percent in 2016 compared to the previous year, according to the trade group.

Total European production in 2016 was around 91 million tonnes.

World paper and board production is expected be up by 0.8 percent in 2016 to reach 410 million tonnes.

Final figures for United States and Canadian production rates are expected to show less than a 2 percent change from 2015. Output slightly increased in South Korea (+0.5 percent). Japan and Brazil output remained the same as last year. The highest growth rates in paper and board output appear to have been recorded by Russia (+3.8 percent), India (+2.9 percent) and China (+2.9 percent).

The CEPI report shows production of graphic grades slowing while packaging grades continue to gain momentum. The biggest output drop (6.5 percent) has been affected by reductions in printing and publishing activities, which use coated and newsprint paper grades.

Packaging grades increased by around 2.3 percent compared to 2015 - deliveries of packaging grades rose by 2.9 percent by the third quarter of 2016. Sanitary and household manufacturers are estimated to have seen an increase in output of about 1.8 percent compared to 2015 and accounted for 8.1 percent of total production. Output of industrial and special purpose paper grades increased by 2.8 percent. Overall, deliveries of graphic grades decreased by 5.6 percent.

Exports within the EU fell by 2.9 percent by the end of September 2016, while exports outside Europe remained steady. The Bureau of International Recycling (BIR), which just released its forecast, is predicting a strong export market in 2017, despite the impact of increased shipping container costs, primarily due to the Hanjin bankruptcy.

On the import side, paper and board coming into the region increased by around 6 percent compared to 2015. Imports from other European countries accounted for 44 percent of all imports in the first three quarters of 2015 (46 percent in the same period 2015) and imports from North America had a share of 30 percent (29 percent in 2015), with the remaining 26 percent was split between the other regions: Asia (11 percent), Latin America (6 percent), and the rest of the world (9 percent).

According to CEPI’s website, the statistics are a compilation of the data received from the National Associations, which are Members of CEPI, under the control of the CEPI Statistics Network.

New Jersey eWaste Law Revised, Catches Industry by Surprise

T

renton, NJ – Electronics waste legislation that languished for a year in New Jersey has been signed by Governor Christie, according WasteDive.com and Resource-Recycling.com articles. The law may significantly improve e-waste recycling efforts in municipalities and at statewide entities – or, it may not.

Sponsored by Senator Christopher ‘Kip’ Bateman, S-981, revises the New Jersey Electronic Waste Management Act, originally signed into law in 2009. The bill also updated current law to include printers and fax machines in the recycling programs.

Under the Act, electronic manufacturers must provide convenient collection of regulated electronic waste in municipalities and at all statewide entities across the state. A 50-cent per pound charge on recycled electronics, to be paid by the manufacturers, will support the administration and enforcement of the recycling programs. This so-called “market share” charge was implemented rather than a “return share,” fee strategy in order to ensure the DEP gets an accurate and transparent account of recycled electronics collected each year.

“Expanding the Act to include printers and fax machines is a landmark move that recognizes the need to reduce the more than 24 million hard copy devices that go unrecycled each year,” Senator Bateman said.

According to a Resource-Recycling.com article, the bill was supported by the Association of New Jersey Recyclers (ANJR), but challenged by original equipment manufacturers (OEMs).

Following stakeholder meetings, the Department of Environmental Protection (NJDEP) requested major changes to the bill. Lawmakers in the state Assembly rejected NJDEP’s requested amendments, however. When the bill was sent to Christie, it retained the same legislative language he had pocket vetoed in January 2016. Because the previous bill was passed within 10 days of the end of a legislative session, Christie’s not taking action on it effectively left the language unchanged. That bill did not return to the legislature for a possible vote to override the veto.

Christie’s signing of the measure was surprising to legislators and the ANJR. The governor’s term ends in 2018. Meanwhile the NJDEP is currently reviewing OEMs’ 2017 collection and recycling plans. The agency has not yet released 2017 collection and recycling targets, and the bill’s new provisions may not go into effect until 2018, according to Marie Kruzan, ANJR’s executive director. Without sufficient DEP staffing, the law could be slow to implement, Kruzan told Resource Recycling.

6 Security Shredding News Spring 2017

Security Shredding News

Large HIPAA Settlements: A Wake Up Call to MSPs

L

Although most investigations turn up the kinds of systemic failures and weaknesses found in the CHCS case, the OCR had previously let many HIPAA-covered entities and their business associates resolve problems voluntarily, without continued monitoring or reporting, Holtzman noted.

That is no longer the case, however.

MSPs that handle or process patient data, especially those that offer cloud-based services, are classified as business associates under HIPAA. Through the audit program launched in 2015, the OCR is expected to go back through years of negotiated corrective action plans to verify that they have been properly addressed. The agency is expected to be looking at business associate agreements, as well, according to another expert interviewed by ServiceIT.com.

HIPAA-covered entities and their business associates must also be aware of Federal Trade Commission regulations and state attorney general jurisdiction over patient privacy.

Other experts in the article advised MSPs to routinely conduct internal security risk assessments and audits, education and training on HIPAA, and insurance coverage that includes Errors and Omissions provisions.

ast year’s tally of settlement fines related to breaches of protected healthcare information nearly quadrupled those of the year before: $23.5 million, compared to $6.1 million in 2015. Many of the violations or potential violations involved business associates.

The steep rise in settlement fines for violations of the Health Insurance Portability and Accountability Act (HIPAA) show that the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) is not overlooking much from now on. The OCR came under fire itself last year by the U.S. Government Accountability Office (GAO) for not being tough enough.

Now, the agency is sending a terse message to covered entities regarding compliance, David Holtzman, vice president of compliance strategies at CynergisTek told SearchIT.com.

Holtzman says the OCR’s findings against Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS) demonstrated the agency’s seriousness about business associate agreements. CHCS’ failures in risk management and inadequate policies and procedures covering information systems and its business associate agreements came under OCR’s microscope.

Coming in Our Next Issue ...

Special Editorial Focus on Plant-Based Shredders!

All plant-based shredder manufacturers who advertise in this issue will receive an editorial profile focusing on their equipment. For more information, contact Rick Downing at 440-257-6453 or email rickdowning@oh.rr.com.

Data Destruction by the Book Finally, a book that tells the customer what reputable data destruction service providers have always wanted to say.

• • • • •

How to pick a service provider What do regulations require Risk management best practices What to include in an RFP or contract Includes forms, policies & templates

Order your copy today! www.naidonline.org Disposition halfpg ShreddingNews317.indd 1

This is the book your customers will soon be reading.

7

3/17/17 10:22 AM

Security Shredding News Spring 2017

Security Shredding News

MAPFRE Agrees to $2.2M HIPAA Breach Settlement

W

ashington, D.C. – In one of 2017’s first Health Insurance Portability and Accountability Act (HIPAA) violation settlements, MAPFRE Life Insurance Company of Puerto Rico (MAPFRE) has agreed to pay a $2.2 million penalty and implement a corrective action plan.

The settlement follows an investigation by the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) for potential noncompliance with the HIPAA Privacy and Security Rules related to unsecured electronic protected health information (ePHI).

On September 29, 2011, MAPFRE filed a breach report with OCR indicating that a USB data storage device (described as a “pen drive”) containing ePHI was stolen from its IT department, where the device was left without safeguards overnight. According to the report, the USB data storage device included complete names, dates of birth and Social Security numbers. The report noted that the breach affected 2,209 individuals.

MAPFRE informed OCR that it was able to identify the breached ePHI by reconstituting the data on the computer on which the USB data storage device was attached. OCR’s investigation revealed MAPFRE’s noncompliance with the HIPAA Rules, specifically a failure to conduct its risk analysis and implement risk management plans, contrary to its prior representations, and a failure to deploy encryption or an equivalent alternative measure on its laptops and removable storage media until September 1, 2014.

MAPFRE also failed to implement or had delayed implementing other corrective measures it informed OCR it would undertake.

“Covered entities must not only make assessments to safeguard ePHI, they must act on those assessments as well” said OCR Director Jocelyn Samuels. “OCR works tirelessly and collaboratively with covered entities to set clear expectations and consequences.”

OCR balanced potential violations of the HIPAA Rules with evidence provided by MAPFRE with regard to its present financial standing. MAPFRE is a subsidiary company of MAPFRE S.A., a global multinational insurance company headquartered in Spain. MAPFRE underwrites and administers a variety of insurance products and services in Puerto Rico, including personal and group health insurance plans.

The Resolution Agreement and Corrective Action Plan may be found on the OCR website at http://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/MAPFRE

www.shred-tech.com

8 Security Shredding News Spring 2017

HIPAA Focuses on Business Associates

N

ew York, NY – Self-assessment can be a smart strategy to ensure compliance with federal rules on protected health information, reports a Law60.com article.

Under the Healthcare Insurance Portability and Privacy Act (HIPAA), doctors’ offices, blood labs, insurance providers and companies that store and/ or destroy patient records are just as responsible for protected health information as the covered healthcare entities with whom they contract to do business.

In 2015, the U.S. Health and Human Services Office of Civil Rights (OCR) clarified the regulatory obligations of business associates under HIPAA, while also increasing scrutiny of their security policies and daily practices Typically, government scrutiny expands into fullblown review of security policies and daily practices once a HIPAA violation, such as a breach, has been reported. Quite often, the OCR finds weak (or nonexistent) risk management.

Self-assessment can be a first step in strengthening HIPAA compliance. According to Day Pitney, LLP attorneys, the cost of a $10,000 risk assessment by an outside consultant discourages a lot of covered entities from seeking outside assistance. To give companies a leg up, the firm has a digital self-assessment tool that now includes HIPAA business associate compliance features. The tool also covers business associate requirements related to the use and disclosure of genetic information.

Security Shredding News

Presence Health Agrees to $475K Penalty for Breach of Operating Room Files

W

ashington, D.C. – Illinois-based Presence Health sustained a data breach on October 22, 2013 when it could not locate its paper-based operating room schedules containing the protected health information (PHI) of 836 individuals. During the course of its investigation, OCR discovered that Presence Health failed to provide notification of the breach within the timeframes outlined in the HIPAA Breach Notification Rule.

In this case, Presence Health should have provided notification of the breach to affected individuals, prominent media outlets and OCR without unreasonable delay and no later than 60 calendar days after its discovery of the breach. However, Presence Health provided notifications to individuals and the media 104 calendar days following discovery of the breach and notified OCR 101 calendar days after discovering the breach.

Presence Health’s failure to notify the affected individuals each constituted a separate violation of the Breach Notification Rule, 45 C.F.R. 164.404(b). Under the terms of the settlement agreement, Presence Health agreed to pay $475,000.

The settlement signals OCR’s intention to enforce breach notification deadlines, and covered entities and business associates must be mindful of reporting timelines or risk potential violations.

www.bomaccarts.com

sales@bomaccarts.com

Environmental Policies Challenge European Paper Recyclers

B

russels, Belgium – A trade group says that EU climate and energy policies have consumed a sizable chunk – more than 40 percent – of European paper industries revenues since 2005, reports EURACTIV.com article.

Sylvain Lhôte, director-general of the Confederation of European Paper Industries (CEPI), told EURACTIV.com that the carbon cap and trade schemes of the Emissions Trading System (ETS), along with increased tax and business rates have contributed to the burden.

“If financial capacities had been better restored and protected over the past ten years, we would have a level of investment pretty close to what it was before the [financial] crisis. So, a billion euros or higher,” Lhôte said.

The European Parliament reached a new agreement in February, however, that offers many positive solutions, including:

• Reemphasizing the need for all sectors to contribute to reducing carbon emissions • Encouraging early movers investing in low-carbon technologies • Maintaining flexibility in setting the auction share • Providing support for member states with compensation for indirect carbon costs • Developing a wider-ranging fund for innovation supporting industry transition towards a low-carbon economy For the paper industry, discrimination between manufacturing sectors has been a sticking issue. Despite the regulatory burden, though, the recycling rate for paper was 70 percent in Europe, according to Lhôte.

Fees and tariffs levied by member states to meet the costs of integrating renewable energies were passed onto paper recyclers and other industries, he added.

Under the ETS, regulated businesses measure and report their carbon emissions. One allowance (such as an operating permit) is allowed for each tonne of carbon released. In addition, countries can also sell permits to the market.

The surplus of traded permits and other schemes resulted in low ETS carbon values, however. Lhôte said this has discouraged investment in low carbon technologies. According to Climate Action Network, the price of carbon in the ETS needs to be raised from €5 per tonne to at least €40 per tonne to stimulate investment. Proposed ETS reform will restrict the amount of pollution credits available in the period 2021-2030.

www.chachkagroup.com chachka@chachkagroup.com Security Shredding News Spring 2017

9

Security Shredding News

$5.5 Million HIPAA Settlement Shines Light on the Importance of Audit Controls

W

ashington, D.C. – Memorial Healthcare System (MHS) has paid the U.S. Department of Health and Human Services (HHS) $5.5 million to settle potential violations of the Health Insurance Portability and Accountability Act (HIPAA).

In 2012, MHS reported to the HHS Office for Civil Rights (OCR) that the protected health information (PHI) of 115,143 individuals had been impermissibly accessed by its employees and impermissibly disclosed to affiliated physician office staff. The breach affected individuals’ names, dates of birth, and social security numbers.

MHS is a nonprofit corporation which operates six hospitals, an urgent care center, a nursing home, and a variety of ancillary health care facilities throughout the South Florida area. The healthcare system is affiliated with physician offices through an Organized Health Care Arrangement (OHCA).

The breach occurred when login credentials of a former employee of an affiliated physician’s office were used to access the ePHI maintained

by MHS. The access, which occurred on a daily basis without detection from April 2011 to April 2012, affected 80,000 individuals.

The OCR investigation found that MHS failed to implement procedures with respect to reviewing, modifying and/or terminating users’ right of access, as required by the HIPAA Rules. Further, MHS failed to regularly review records of information system activity on applications that maintain electronic protected health information by workforce users and users at affiliated physician practices, despite having identified the problem on several risk analyses conducted by MHS from 2007 to 2012.

Casper Ends e-Waste Recycling

C

asper, WY – According to an Associated Press article published on StarHerald.com, Casper City Council has voted down a five-year electronics waste recycling contract. The city will return to dumping old TVs and computers in the local landfill.

Most e-waste, such as smaller TVs and monitors (less than 13 inches) are picked up along with curbside trash collection, so long as the TV or monitor does not overfill the trash container. Electronics weighing more than 50 pounds must be taken to the Casper Solid Waste Facility.

Casper City Council decided that the contract with Colorado-based Electronic Recyclers International had become too expensive and they saw the availability of cheap space at the landfill as the best alternative. The council estimated a cost of $57,000 a year to dump electronics in the landfill, but $28,000 of that cost is likely to be subsidized by the annual recycling fees paid by residents.

Ending the program will also affect other cities that pay Casper to dispose of their residents’ waste, the article said.

Illinois E-Waste Collection Continues

C

ortland, IL – Electronic waste collector, DC Trash of Illinois, will be collecting DeKalb County’s electronic waste through 2017, reports a Daily-Chronicle.com article.

The recycler is accepting most items with a plug or a battery for free. DC charges for some larger electronic items, such as computer monitors ($10), televisions ($20 or $30, depending on size), and any appliances with Freon such as refrigerators and air conditioners ($5 to $15).

According to the DeKalb County website, residents receive a coupon for equal value when paying to recycle electronics that incur a fee. The coupon may be applied the next time they discard a recyclable.

Product/Equipment Profiles Ameri-Shred Introduces 2mmSSD Solid State Drive Shredders

A

D-Link Introduces Vigilance Full HD PoE Dome Network Camera

D

meri-Shred has added a 2mm-SSD shredder that will shred SSD’s, cell phones, tablets, memory cards, thumb drives, circuit boards and other solid state drive devices to 2mm particles. This dual stage destruction system utilizes a 2 HP pre-shredder with 3/8” cutters that discharges into a 3 HP hammer mill.

The 2mm-SSD will shred up to fifty SSD’s an hour and includes a sound absorbing lining that results in an 85-decibel level, on average. All models also include an hour meter and casters.

The 2 cubic foot discharge bin slides forward for easy access.

Additional options include an infeed conveyor, air filtration system, additional screen sizes, lighted viewing window, fork pockets, backlit logo and choice of powder coat color.

-Link recently unveiled the latest addition to its popular Vigilance series of value-oriented professional surveillance cameras. With crisp Full HD and 3 megapixel video quality, the Vigilance Full HD PoE Dome Network Camera (DCS-4603) delivers detailed surveillance in a variety of lighting conditions. The D-Link DCS4603 can be mounted indoor on walls or ceilings, with a unique 3-axis gimbal to precisely position the lens exactly where it’s needed.

Equipped with a 3-axis bracket, the versatile D-Link DCS4603 offers precise positioning of the lens and supports nonmotorized 340-degree pan and rotation, along with 60 degree tilt, for comprehensive wall-to-wall surveillance. The camera includes a builtin 802.3af compliant Power over Ethernet (PoE) module offering convenient single cable setup for simpler, safer and less expensive installation. In addition, the Vigilance line comes with D-Link’s free Video Management Software, D-ViewCam, a complete surveillance software package that enables users to view, manage and record up to 32 cameras on a single computer.

For more information contact Ameri-Shred Corp at 800-634-8981 or info@ameri-shred.com or visit www.ameri-shred.com.

For more information visit us.dlink.com, or connect with D-Link on LinkedIn (http://www.linkedin.com/company/d-link).

10 Security Shredding News Spring 2017

Find the people, solutions and education you need!

May 9-10, 2017

Ernest N. Morial Convention Center New Orleans, LA

Talk healthcare waste with experts and peers for two days of non-stop insights.

Join the healthcare waste industry’s most powerful leaders to learn, network and do business in New Orleans this May! These are your people—they live and breathe all things healthcare waste related—just like you.

Register today for early-bird pricing! www.healthcarewasteconf.com You asked and we delivered: The conference is now Tuesday, May 9 – Wednesday, May 10.

Security Shredding News Spring 2017 11

PRSRT STD U.S. Postage

PAID

Cleveland, OH Permit #1737

6075 Hopkins Rd • Mentor, OH 44060 • Ph: 440-257-6453 • Fx: 440-257-6459 • Email: downassoc2@oh.rr.com

Inside This Issue

VOL. 14 NO. 1

SPRING 2017

The Safe Way is the Only Way PAGE 1 Preliminary European Recyclable Paper Numbers Released PAGE 6 MAPFRE Agrees to $2.2M HIPAA Breach Settlement PAGE 8 Environmental Policies Challenge European Paper Recyclers PAGE 9News, Mobile - 1/2 page, 4C Security Shredding & Storage Product / Equipment Profiles PAGE 10 266.6mm h] [10 1/2inc

Shreds Everything!

533.4mm [21inch]

800mm h] [31 1/2inc

m 1108.6m nch] [43 21/32i

rail

Shreds Everything!

E EDD R R H H S S CKS S U CK TRU R T new & USed Single-Shaft RotaRy ShReddeRS PieRce & teaR ShReddeRS cdl & non-cdl

WITH

W

ba c fa ge ked Pa ctoRnUin by Rt S & y diRe Se ec RV t ice

IT H

(336) 285-0021 www.VecoPlanllc.com 5708 UwhaRRie Road • aRchdale, nc 27263

26' - 1"

Shreds Everything!

rail 8' - 7"

Yep, That Too! 35' - 4" Truck Curb Side Vie

w

17 Body (Tail End)

1,200 Cubic Feet Shredded Materia Storage Capacity