Interesting stat:
22% of reported medical/dental data breaches are paper information not digital.
For example charts tossed in a dumpster instead of shredded. BTW it is not good enough to shred them you need documentation from the shredding company.