when should the computer bureau destroys or erases records,should the erasure be verified by the bureau to the physician?