Jon,
A bit off topic, but do you have the agent sign any thing to release you from any HIPAA violation if the aforementioned disc or flashdrive gets lost with all the patient data?
That is a good idea - a Chain Of Custody document that releases you from responsibility.
Of course, you could encrypt it, send it to them, and send them the key after they pay.
