Case Study: a large medical device company achieves compliant records management and defensible destruction with Iron Mountain

How iron mountain standardized policy and simplified enforcement for one large medical device company

The Large Medical Device Company faced significant challenges in managing protected health information and vital records following a merger. With a lack of resources and visibility, their global HR operations team struggled with compliance risks and high storage costs. They engaged Iron Mountain to design a solution using a customized version of Policy Center to standardize their data governance policy and enable defensible destruction.

Iron Mountain implemented a two-phase solution, first creating a corporate policy and processing records in their largest markets. The vendor’s staff classified documents and captured key metadata, destroying non-essential records. The results included a fully documented, auditable policy and a established plan for global rollout. The customer benefited from increased HR collaboration, significant anticipated storage cost savings, and a major reduction in compliance risk.