HIPAA Regulation Text 45 CFR Part 164.310(d) requires a covered entity to implement policies and procedures that govern the receipt and removal of hardware and electronic media that contain electronic ...