Cyber Security News
You Be The Hero. We've Got Your Back!

PHI and Secure E-mail

Almost daily there is a story about a breach floating around in the news cycle. In today’s world of big data and the methods we share information, your sensitive data is always at risk. Your data is valuable, to every cyber criminal out there. What about Electronic Health Information, what type of precautions have you taken to keep your patients data out of the hands of these criminals?

We will start with the most obvious encrypted email (often called “secure email”) can help keep your sensitive patient data safe, and avoid potentially costly fines for HIPAA violations.

In the health care sector there are many different ways to protect your email most methods are hard to use and cannot be done ad-hoc.

Secure content exchange with peer providers; this landscape involves the exchange of secure content only with other direct users and requires a relationship with a HISP. This could be problematic because you are sharing personal/business information with the HISP, and also requires unique e-mail addresses for external communications. In most every case it is webmail only, you have file type and size limitations. You are reliant on the HISP for tracking and audit. Finally it offers no protection from malicious content received via attachments.

Secure content exchange with Patients: this is supported only if you want to pay and issue a unique address, otherwise you must integrate with a portal.

Patients are required to enroll in your portal, which as we all know leads to low adaption rates and frequent calls for unique ID and password maintenance, it all seem hard and confusing.

We feel a better solution is Safe-T verses secure content exchange with peer providers; with this alternative you are able to exchange secure content with anyone. No need for 3rd party services.

Validation of accredited participants is maintained by your organization. You are able to use existing e-mail addresses. Webmail & outlook are supported, any file size or type. Security policy enforcement, antivirus authentication, and data loss prevention all usable.

Safe-T content exchange with patients; No patient portal required, patient authentication via their personal e-mail and a onetime password delivered by SMS, phone or e-mail. The patient can view/download PHI as well as respond securely.

Safe-t provides a secure collaborative space for content sharing and sync, with registered and ad-hoc participants.

All resulting in; easier, quicker compliant communications within the health care industry.

Touch base with me if you’re interested in learning more rsimmons@shield4uc.com