Before used equipment leaves your building, three things need to happen: patient data has to come off it, it has to be decontaminated, and you need a record of where it went. Do those well and the sale is simple. Skip them and the risk stays with you, even after the device is gone.

Remove patient data first

Many devices store more than people realize. Patient monitors, ultrasound systems, analyzers, imaging workstations and anything with a hard drive or a user list may hold protected health information.

HHS guidance is clear on the basics. Under the HIPAA Security Rule, covered entities need policies for the final disposition of electronic PHI and the hardware it's stored on, and procedures for removing it before media are re-used. HHS doesn't require one specific method. It describes clearing, purging and destroying media as options, and points to NIST guidance for the practical detail. See the HHS FAQs on disposing of PHI and re-using equipment that stores it, along with NIST SP 800-88.

In practice:

  • Use the manufacturer's procedure to clear patient data, logs and user accounts
  • Find removable media, such as SD cards, USB drives and internal storage
  • Check with your privacy or IT team what your policy requires
  • Record the device serial number, the method used, the date and who did it

Decontaminate and document it

Clean and decontaminate every device according to the manufacturer's instructions, and attach a signed statement showing what was done. Reputable buyers ask for this because their technicians are the ones handling the device next. A unit that may be a biohazard often can't be accepted at all. If something can't be cleaned, or was exposed to a hazardous material, say so upfront.

Gather what affects value

Buyers price risk, so the more they can verify, the better. Before asking for an offer, collect:

  • Make, model, serial number and year of manufacture
  • Software version and installed options
  • Maintenance history and the last calibration or PM date
  • Honest condition notes, including known faults
  • Included accessories, manuals, cables, probes and batteries
  • Clear photos of the whole device, the label and the display powered on
  • Where it's located, and whether there's dock access

A device with records and accessories is simply easier to resell. If you don't have the paperwork, say so. A straight answer beats a surprise during inspection.

Sell it, trade it or retire it

Working, supported equipment usually still has resale value, especially if you sell before it's been in storage for years. A device that's past use may still be worth something for parts. If nothing can be recovered, use a licensed recycler. Some devices contain batteries or other materials with their own disposal rules, so check state and local requirements.

Close the loop on your records

Once the device has gone, update your inventory with the disposition date, the buyer or recycler, and any data and decontamination records. Remove it from your preventive maintenance schedule, too. Keep bills of sale and certificates in line with your retention policy, because those records may be the only proof of what happened to the data.

Have equipment to clear out? Send us the details for an offer, or read more on our sell your equipment page.