when the computer service bureau destroys or erases records, should the erasure be verified by the bureau to the physician?