A Practice Note addressing the standards for disposing of protected health information (PHI) by group health plans, as covered entities, and their business associates under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).