HIPAA requires that all PHI be destroyed in a way that prevents it from being reconstructed.