when the computer service bureau destroys or erases medical records, should the erasure be verified by the bureau to the physician?