Wiki Gmail and PHI?

Create Wiki
N

NM36

Contributor
Messages
22
Location
Melrose, MA
Best answers
0
Hello,

Our answering services sends us messages via an office gmail account. These messages always show the "TLS" encryption method in the header, but I'm wondering if this is sufficient for HIPAA compliance? We don't have a BAA with gmail, it's just the free version.

The answering service claims this is secure and HIPAA compliant, but I have a bad feeling about it. Why would anyone bother with extra encryption services if this was the case?

Any thoughts/ advice appreciated.
NM
 
Hello,

Yes, they are correct in that it is not HIPAA compliant. However, Google does offer a package called G-suite that includes more security, and they are able to sign a BAA with an organization. Quick question, does your facility have a designated compliance/privacy officer or contact? If not, I would highly suggest that your facility obtain one. A compliance program is mandatory since the implementation of the Affordable Care Act (ACA). Feel free to send me an e-mail at info@codingandcompliance.org for more information or other questions. I would be more than happy to answer them for you. Have a wonderful afternoon.
 
You must log in or register to reply here.
Top