decisionhealth Newsletters, Part B News - 2024 Issue 8 (August)
Your patient wants records sent via unsecure email. Are you covered?
Subscribe or sign in to view the full article.
Article Overview
This article addresses how HIPAA privacy and security principles apply when a patient asks for medical records to be sent by email and the provider does not use secure email. It explains the general compliance context, patient access issues, risk warnings, alternative delivery options, and related guidance from HHS, OCR, and ONC. The piece is relevant to health care providers, privacy and compliance staff, and office personnel handling record requests and patient communications.
Why This Topic Matters
Email delivery of protected health information can create privacy and security concerns, so providers need to understand when patient requests may be honored and what safeguards or alternatives may be appropriate. The article is useful for reducing compliance risk and for understanding how federal guidance affects day-to-day record release workflows.
Article Sections
-
Question and answer on patient-requested email delivery
Introduces the access-request scenario and frames the privacy and security issue for providers that do not have secure email capability.
-
HIPAA privacy and security guidance
Summarizes federal guidance on protecting patient information, reasonable safeguards, and patient-requested unsecure transmission.
-
OCR and exception considerations
Discusses additional federal guidance and circumstances in which a provider may need to consider whether an alternate delivery option is appropriate.
-
Alternative delivery methods and business associate issues
Reviews other ways to provide records and notes considerations related to messaging tools and outside vendors.
-
Resources
Lists the federal reference materials cited in the article for further review.
What You Will Learn
- How federal privacy and security guidance relates to patient-requested email delivery of records
- What general safeguards are discussed for handling access requests
- What alternatives may be considered when secure email is not available
- Which federal guidance documents are referenced in the discussion
- Why compliance staff may want to review vendor and communication-tool arrangements
Who Should Read This
- Physicians and other health care providers
- Medical office managers
- HIPAA compliance and privacy staff
- Health information management professionals
- Billing and administrative personnel who handle records requests
Code Ranges Discussed
Subscribe or sign in to view the full article.
Quick, Current, Complete - www.findacode.com