Standard email provides no security for PHI. Many facilities would choose not to allow transmission of PHI via email at all.
If email is necessary, some facilities may allow transmission of PHI via secure end-to-end encrypted email, where the sender and the recipient are the only users able to access the email contents. If PHI files need to be sent, extra security measures may involve password-protected email attachments, where the files require a password to be opened. Additional encryption software should be used to ensure that emails and files are secure.
You must comply with your facilities' policies and procedures regarding any use or disclosure of email and attachments for PHI.
