Smart Training
  • Home
  • About Us
    • Meet Our Team
    • Testimonials >
      • dental testimonials
      • health care testimonials
      • construction testimonials
      • manufacturing testimonials
      • oil & gas testimonials
    • PARTNERS
    • Contact
  • Services
    • Dental Products Comparison
    • Medical Essentials
    • Manufacturing Services
    • Construction Services
    • LMS Services
  • Purchase Training
    • Dental Individual Training
    • Dental Training Packages
    • Health Care Individual Training
    • Health Care Training Package
    • Construction Compliance Training
    • Manufacturing Compliance Training
  • Blog
  • START TRAINING

WHAT ABOUT ENCRYPTED EMAIL?  Part II

1/15/2018

0 Comments

 
HIPAA requires both Covered Entities and Business Associates to retain past email communications containing ePHI. The retention period is 6 years. For any healthcare organization, no matter the size of the practice, storing 6 years of emails and attachments requires considerable storage space. Consider using a secure, encrypted email archiving service rather than email backups.
Picture
An email archiving service will free up needed hard drive storage space and save time as well.  Since an email archive is indexed, searching for emails is a quick and easy process. If emails must be produced for legal purposes or for a compliance audit, they can be quickly and easily retrieved.
​Any provider of an email archiving service will also be a Business Associate and therefore subject to HIPAA Rules. A Business Associate Agreement will be required between your office and the archive service provider.  The BAA should incorporate reasonable assurances that the service will train their staff on patient privacy and abide by HIPAA requirements concerning the information they store for your office.
 
From time to time, you may find it convenient to send emails containing ePHI to patients.  Remember, however, that consent to use email as a communication method typically must be obtained from the patient in writing before any ePHI is sent via email, even if a HIPAA compliant email provider is used.  Patients must be advised that there are risks to the confidentiality of information sent via email. If they are prepared to accept the risks, emails containing ePHI can be sent without violating HIPAA Rules.  Up-to-date Notices of Privacy Policies should offer this information to patients, and signed acknowledgements of receipt should be in the patient’s chart before an email is sent.
 
If you are unsure of the requirements of HIPAA with respect to email, we recommend that you contact our Certified HIPAA Professionals.  As with most issues regarding patient privacy, a little information can go a long way toward staving off disaster.
0 Comments



Leave a Reply.

    Jim Moore

    Is a Certified HIPAA Professional who has worked for Smart Training since 1998.

    Archives

    September 2019
    July 2019
    June 2019
    May 2019
    April 2019
    January 2019
    December 2018
    November 2018
    October 2018
    September 2018
    August 2018
    July 2018
    June 2018
    May 2018
    April 2018
    March 2018
    February 2018
    January 2018
    December 2017
    November 2017
    October 2017
    September 2017
    August 2017
    September 2016
    April 2016

    Categories

    All
    Dental
    Healthcare
    HIPAA
    HIPAA Series
    Infection Control
    Info-Graphic
    New Partners
    OrthoAssist
    Orthodontic Training
    OSHA Compliance
    OSHA Fines
    Workplace Safety

    RSS Feed

Picture

Industries

Dental
Health Care
Construction
Manufacturing
Oil & Gas Services

    NEWSLETTER

    Sign up for our monthly newsletter to stay current on all your compliance concerns.
Subscribe to Newsletter
© COPYRIGHT 2019. ALL RIGHTS RESERVED.
  • Home
  • About Us
    • Meet Our Team
    • Testimonials >
      • dental testimonials
      • health care testimonials
      • construction testimonials
      • manufacturing testimonials
      • oil & gas testimonials
    • PARTNERS
    • Contact
  • Services
    • Dental Products Comparison
    • Medical Essentials
    • Manufacturing Services
    • Construction Services
    • LMS Services
  • Purchase Training
    • Dental Individual Training
    • Dental Training Packages
    • Health Care Individual Training
    • Health Care Training Package
    • Construction Compliance Training
    • Manufacturing Compliance Training
  • Blog
  • START TRAINING