Can electronic protected health information (EPHI) be emailed?
Do not send EPHI over email unless (a) you send the email from your account on the university’s enterprise email system to another account on the enterprise email system or (b) you send email to locations outside of the enterprise email system and you have taken appropriate safeguards to prevent unauthorized access to the enclosed EPHI. Sending email external to the university’s enterprise email puts the EPHI at jeopardy to exposure to external sources.
