Tag: phi

Is FAXing really HIPAA Compliant?

September 12, 2017

Many organizations, especially in the healthcare industry, have an urgent need to send important and sensitive information, like protected health information (what constitutes PHI?), to organizations via FAX (facsimile). Why?  Because this is how it has always been done, and everyone is “set up” to be able to handle FAXes quickly and efficiently. Go back […]

Opt-In Email Encryption is Too Risky for HIPAA Compliance

July 11, 2017

A majority of companies that offer email encryption for HIPAA compliance allow senders to “opt-in” to encryption on a message-by-message basis. If the sender “does nothing special” then the email will be sent in the normal/insecure manner of email. If the sender explicitly checks a box or types a keyword in the body or subject […]

How Is HIPAA-Compliant Email Different from Secure Email?

June 21, 2017

Protected health information (PHI) is heavily regulated under HIPAA, but the exact details can be confusing. The regulations are designed to keep everyone’s private information safe, but they also put a significant amount of responsibility on businesses. HIPAA regulations apply to just about every aspect of a person’s medical information, including their transit, storage and […]

Is sharing my patient list with a marketing company OK under HIPAA?

February 11, 2017

We received this questions via Ask Erik from the head of a Dental Practice (who wished to remain anonymous): “I want to create a Refer-a-Friend program, for a dental practice, that will be managed by a third party marketing agency.  The third party needs only my patient names and address to do an on-going e-mail […]

How the HIPAA Omnibus Rule Affects Email, Web, FAX, and Skype

May 6, 2013

We have written extensively in the past about the impact of HIPAA regulations on email services, web hosting, faxing, and Skype use.  The recent HIPAA changes reflected in the Omnibus rule have a significant impact on the use of these types of services.  Here, we examine the new and important considerations based upon the HIPAA Omnibus Rule.