This article discusses what types of email encryption are sufficient to comply with government regulations. TLS email encryption is a good option for many organizations that manage sensitive data. However, it does not protect data at rest. Each organization must perform a risk assessment to determine which encryption methods suit their legal requirements.
There are many ways to protect ePHI in email. HIPAA is technology-neutral and doesn’t make specific recommendations for how to protect email communications. This article explains the difference between a HIPAA-compliant email host and an email encryption gateway. These are just two of the options for securing email accounts.
In a question recently submitted to “Ask Erik,” John asked: “How does sending a TLS-encrypted email sometimes become non-compliant? Lets says I send an email from my Office 365 Business account to a gmail.com account which both support TLS encryption. Is it because I do not know what path and what servers the email has […]
We are frequently asked who supports TLS to secure inbound email delivery. This is especially important for customers who need to be HIPAA-compliant, as email transport encryption over TLS is sufficient for HIPAA-compliant communications to end-users, so long as the TLS is configured to be sufficiently strong. While it is possible to tell who supports […]
WESTWOOD, MA, May 31, 2013 — LuxSci® announces the recent launch of Secure Email Marketing, a unique solution to combined need for email marketing, patient engagement, and patient communication while remaining fully HIPAA compliant. LuxSci’s existing Secure High Volume mailing service enables sending vast quantities of email for marketing and transactional purposes. This service is […]
