Skip to content

Compliance Fundamentals

Estimated Time: 40 minutes Audience: All Employees Prerequisite: None

Course Overview

Lesson Topic Time
1 Why Compliance Matters 5 min
2 R2 Certification & Data Destruction 10 min
3 HIPAA — Protecting Patient Information 10 min
4 Environmental & Safety Compliance 10 min
5 DOT Compliance (Drivers) 5 min

After completing these lessons, you'll understand Scott Recycling's compliance obligations and your role in maintaining them.

Lesson 1: Why Compliance Matters (5 min)

Learning Objectives

  • Understand why compliance is critical for Scott Recycling
  • Know which certifications and regulations apply
  • Identify your role in maintaining compliance

Scott Recycling's Compliance Landscape

Scott Recycling operates under several regulatory frameworks:

Area What It Covers Who It Affects
R2 Certification Responsible recycling of electronics All employees
Data Destruction Secure wiping/destruction of data-bearing devices Warehouse, Processing
HIPAA Protecting patient health information from healthcare customers All employees handling healthcare materials
Environmental Proper handling and disposal of hazardous materials Warehouse, Drivers
Workplace Safety OSHA requirements, PPE, incident reporting All employees
DOT Department of Transportation rules for commercial vehicles Drivers, Dispatchers

Compliance Is Not Optional

Violations can result in loss of certifications, fines, and legal liability. Every employee plays a part in keeping Scott Recycling compliant.

Lesson 2: R2 Certification & Data Destruction (10 min)

Learning Objectives

  • Understand what R2 certification requires
  • Know the data destruction process
  • Identify when to escalate compliance questions

R2 Certification

R2 (Responsible Recycling) is the industry standard for electronics recyclers. It requires:

  • Tracking — Every device must be tracked from receipt to final disposition
  • Data security — All data-bearing devices must have data destroyed before resale or recycling
  • Environmental management — Hazardous materials must be handled per regulations
  • Downstream accountability — We must verify our downstream vendors are also compliant

Data Destruction Process

  1. Identify data-bearing devices (hard drives, phones, tablets, etc.)
  2. Wipe using approved software (documented with certificates)
  3. Verify the wipe was successful
  4. Document with a certificate of destruction
  5. Store certificates for audit records

Never Skip Data Destruction

Every data-bearing device MUST go through the destruction process, even if it looks empty or broken. This is an R2 requirement.

Lesson 3: HIPAA — Protecting Patient Information (10 min)

Learning Objectives

  • Understand what HIPAA is and why it applies to Scott Recycling
  • Recognize Protected Health Information (PHI)
  • Know what to do if you encounter PHI or suspect a breach

Why HIPAA Matters to Us

When Scott Recycling services healthcare customers — hospitals, clinics, medical groups — we may encounter Protected Health Information (PHI): patient names, medical records, insurance information, and more. Under federal law, this makes us a Business Associate, and we are directly liable for protecting that information.

PHI can appear on:

  • Hard drives and storage devices
  • Paper records found with equipment
  • Labels on computers and printers (patient names, medical record numbers)
  • Phones, tablets, USB drives, backup tapes

What to Do

  • Treat all materials from healthcare customers as potentially containing PHI
  • Do not read patient records — collect and secure them for destruction
  • Cross-cut shred any paper PHI — never put it in regular trash or recycling
  • Follow the chain of custody for all data-bearing devices from healthcare customers
  • Report immediately if you find PHI in an unsecured location or suspect a breach

Breach Reporting

If you suspect PHI has been lost, stolen, accessed by an unauthorized person, or improperly disposed of:

  1. Stop the breach if you can (secure the materials)
  2. Report to your supervisor immediately — do not wait
  3. Document what you saw and when

Scott Recycling must notify the healthcare customer within 5 business days of discovering a breach. The clock starts when any employee becomes aware — so report immediately.

Full HIPAA Training

This is an overview. All employees who handle healthcare customer materials must also complete the full HIPAA Fundamentals Training at hire and annually.

Lesson 4: Environmental & Safety Compliance (10 min)

Learning Objectives

  • Know how to handle hazardous materials
  • Understand workplace safety requirements
  • Report incidents correctly

Environmental Compliance

Scott Recycling handles materials that require special care:

Material Handling Requirement
Batteries Separate storage, no landfill disposal
CRT monitors Contain lead — special handling and disposal
Mercury-containing devices Separate collection, certified disposal
Refrigerants Must be recovered by certified technicians
Toner/ink cartridges Separate collection for recycling

Workplace Safety

  • PPE — Wear required personal protective equipment for your work area
  • Incident reporting — Report all injuries, near-misses, and hazards immediately
  • Emergency procedures — Know your evacuation routes and assembly points
  • Ergonomics — Follow proper lifting techniques for heavy items

Report First, Ask Questions Later

If you see a safety hazard or have an incident, report it immediately to your supervisor. Don't wait to figure out if it's "serious enough."

Lesson 5: DOT Compliance — Drivers (5 min)

Learning Objectives

  • Understand DOT requirements for commercial drivers
  • Know pre-trip and post-trip inspection requirements
  • Understand hours-of-service rules

DOT Basics

Drivers operating commercial vehicles must comply with Department of Transportation regulations:

  • CDL requirements — Valid commercial driver's license for your vehicle class
  • Pre-trip inspections — Check brakes, tires, lights, fluids before every trip
  • Hours of service — Follow driving time limits and rest requirements
  • Vehicle maintenance — Report mechanical issues immediately
  • Drug & alcohol testing — Random and post-incident testing applies

Pre-Trip Inspections Save Lives

A thorough pre-trip inspection takes 15 minutes but can prevent breakdowns and accidents. Never skip it.

What's Next?

Quick Reference

Situation Action
Found a data-bearing device Route through data destruction process
Safety incident Report to supervisor immediately
Hazardous material spill Follow emergency procedures, notify supervisor
Vehicle issue (drivers) Report in Fleet app, do not operate if unsafe
Audit preparation Ensure all documentation is current and accessible