related or created by a health care worker does not mean it has to conform to
HIPAA . While HIPAA compliance is often seen as a best-practice its good to
distinguish between what is mandated and what is desirable as the costs can be
significant. There are a number of good resources and I would suggest starting
here:
http://www.nais.org/government/article.cfm?ItemNumber=145606
It is generally cost-prohibitive to make your entire email system HIPAA
compliant for the use of one or two staff (and that goes for the rest of your
systems as well). Most large health systems keep it out of email completely and
use a series of web based forms because they cannot always be assured that the
recipient system is secured. There are a number of commercial systems that you
could purchase an account on for the exclusive use of transacting HIPAA
information. I have not used any of them (e.g. http://www.sendhipaa.com/)
because I have not worked at/with a school that would be considered a covered
entity.
_J
____________________________
Jason at jasonpj@yahoo.com
________________________________
From: Elizabeth Davis <lizbdavis@gmail.com>
To: ISED-L@LISTSERV.SYR.EDU
Sent: Mon, October 25, 2010 8:54:29 AM
Subject: HIPPA email Policies?
Hi,
I am researching HIPPA policies with regard to email communication.
How do you all deal with HIPPA regulations?
Thanks for your help!
-Liz
Liz B. Davis
Director of Academic Technology
Belmont Hill School
Belmont, MA
http://www.edtechpower.com
[ For info on ISED-L see https://www.gds.org/podium/default.aspx?t=128874 ]
Submissions to ISED-L are released under a creative commons, attribution,
non-commercial, share-alike license.
RSS Feed, http://listserv.syr.edu/scripts/wa.exe?RSS&L=ISED-L
[ For info on ISED-L see https://www.gds.org/podium/default.aspx?t=128874 ]
Submissions to ISED-L are released under a creative commons, attribution, non-commercial, share-alike license.
RSS Feed, http://listserv.syr.edu/scripts/wa.exe?RSS&L=ISED-L
