Can protected health information be transmitted through email?
Protected health information should not be transmitted through email services. Email, in its native state, is an insecure form of communication and HIPAA specifically requires controls to ensure integrity and confidentiality of protected health information. However, there are ways to secure email communication. If there is a business need to send protected health information through email, the Information Security Office should be engaged to ensure proper controls are put in place prior to sending.
