Purpose

The purpose of the Data Backup Plan is to establish and implement procedures to create and maintain retrievable exact copies of electronic Protected Health Information (ePHI) and related technology components that are necessary for recovery activities.  This document will define the following standards for organization backup processing:

• To provide a standard operating procedure for backup up organization data
• To provide a standard for labeling backup media
• To provide a standard for data retention
• To provide a standard for offsite storage and retrieval of backup media

The data backup plan allows organization to meet the availability requirements of the HIPAA Security Rule for protecting the Confidentiality, Integrity, and Availability of ePHI.   

Table of Contents for Data Backup Plan Template

PLAN MAINTENANCE

COMPLIANCY

INTRODUCTION

Purpose
Responsibilities
Data Backup Requirements

PROCEDURES

Backup Processing
Daily Incremental Backups
Weekly Full Backups
Monthly Full Backups
Daily Replication of Data

TAPES

Scheduling and Backup Media Rotation
Tape Labeling  
Retention Cycle
Tape Drive Cleaning
Backup Tape Testing

CONTACT LISTS

Data Backup Vendor
Offsite Storage Vendor

APPENDIX

Appendix A:  Tape Labeling Log
Appendix B:  Data Backup Schedule
Appendix C:  Backup Job Log 
Appendix D:  Tape Cleaning Log

To view specific section of this document, please contact us at Bob@training-hipaa.net or call us at (515) 865-4591.