To send or not to send: E-mail transmission of protected health information with confidentiality/privacy notices

Abstract

The principal goals and objectives of this article are to debunk myths regarding e-mail transmission of protected health information (PHI) and to discuss appropriate verbiage in confidentiality/privacy notices (CPNs) intended to manage the risk of a breach of confidentiality/privacy when PHI is transmitted by e-mail. As a prelude to this discussion, we will discuss briefly the history of the Health Insurance Portability and Accountability Act (HIPAA). Educational objectives: Readers should be able to describe HIPAA, determine when it's appropriate to send PHI by e-mail, and the how to word such communications to protect all involved parties.