Category: LuxSci Library: HIPAA

HIPAA FAX Breach: Why health care should finally stop faxing

September 11, 2017

For more information, see: Hospital faxed a patient’s HIV-positive status to his workplace — he’s now suing for $2.5 million Is a FAXing really HIPAA-compliant? HIPAA Faxing: How To Send and Receive FAXes in a Secure and Compliant Way

Text “NO” to stop the HIPAA Violations

August 30, 2017

Patient Privacy Issues with Unencrypted Email

August 28, 2017

We have scoured the internet for real-life examples of emails in medical scenarios to convince our readers of our points in past posts about the perils and pitfalls of using unencrypted emails for communications. Email is one of the oldest (some even refer to it as “legacy”) tools in our always-connected, digital world. However, its use […]

Does my patient intake form need to be HIPAA compliant?

August 2, 2017

  Our latest “Ask Erik” question involves questioning when web-based patient-intake forms need to be HIPAA compliant: B.G. asks: “Do we need to be HIPAA compliant if our intake forms have patient name, birthday, and address, but no social security number or other insurance information?” The short answer is “YES“. You need to be concerned […]

Opt-In Email Encryption is Too Risky for HIPAA Compliance

July 11, 2017

A majority of companies that offer email encryption for HIPAA compliance allow senders to “opt-in” to encryption on a message-by-message basis. If the sender “does nothing special” then the email will be sent in the normal/insecure manner of email. If the sender explicitly checks a box or types a keyword in the body or subject […]