Does HIPAA allow for sending electronic protected health information (PHI) in an email or over the internet?
Yes, the HIPAA Privacy Rule allows covered health care providers to communicate electronically, such as through email, with their patients, provided they apply reasonable safeguards when doing so. For example, certain precautions may need to be taken when using email to avoid unintentional disclosures, such as checking the email address for accuracy before sending, or sending an email alert to the patient for address confirmation prior to sending the message. Also, while the HIPAA Privacy Rule does not prohibit the use of unencrypted email for treatment-related communications between health care providers and patients, other safeguards should be applied to reasonably protect privacy, such as limiting the amount or type of information disclosed through unencrypted email.
Related Questions
- Does the HIPAA Security Rule allow for sending electronic PHI in an email or over the Internet? If so, what protections must be applied?
- Does HIPAA allow for sending electronic protected health information (PHI) in an email or over the internet?
- Do HIPAA regulations apply to data sets containing protected health information (PHI)?
