Welcome to the NEW CHUG— your ultimate destination for cutting-edge insights and discussions at the intersection of healthcare and technology.

Our platform is dedicated to exploring the dynamic landscape of healthcare technology, empowering professionals, enthusiasts, and innovators alike with the knowledge and resources to navigate the rapidly evolving field.

From telemedicine revolutionizing patient care to the transformative potential of artificial intelligence in diagnostics, we delve into a myriad of topics shaping the future of healthcare delivery. Whether you’re a seasoned healthcare IT professional, an aspiring entrepreneur in the digital health space, or simply curious about the latest innovations, our curated content, expert interviews, and thought-provoking articles provide a comprehensive exploration of healthcare technology’s most pressing issues.

Join us as we navigate the forefront of innovation, driving forward the transformation of healthcare for a healthier, more connected world.

Have questions or suggestions? Please use the contact button below.

Notifications

Clear all

Email Encryption discussion anyone?

General Discussion

Last Post by tnc 12 years ago

1 Posts

1 Users

0 Reactions

47 Views

RSS

tnc

(@tnc)

Posts: 517

Honorable Member

Topic starter

I am wondering what others are doing with respect to email encryption. I have always questioned the thought process behind just securing the portal with secure email and leaving a gigantic hole of a problem of someone accidentally emailing PHI over your regular mail server. Even forwarding something which was received unencrypted is something to watch out for and I have seen this happen.

So earlier this year I finally got my wish and have implemented a secure email service. After implementing it I am finding that many of the users are complaining about whom they are sending encrypted email to (why they actually care that something is encrypted is beyond me), I do get complaints from recipients, and the only thing I can do is perform a quick forensic investigation to see which rule triggered the encryption and have a discussion with the sender about how a computer looks at each email and makes a determination about encryption. There are times where a PHI-looking email is encrypted but really doesn't contain PHI about a patient but it does contain a name and medical terms (like a conversation between surgeons about procedures they do, etc). The recommendation from my encryption provider was basically to weaken the filter to allow certain emails through but if I do that I risk other emails which should be encrypted to go through unencrypted.

By the way I am using Symantec.Cloud (purchased through Dell) for encryption and spam prevention. Overall I am pleased with it but just didn't want to overload my help desk with stupid calls from recipients about how "they can't open the email which was sent to them". I would like to tell them to get used to it because it will be the standard before long.

We did implement a bypass by putting [unencrypted] in the subject line which seems to work well and it is locked down to a group of managers who do more than just taking care of patients.

Just wondering what everyone else is doing.

Mike Zavolas

Tallahassee Neurological Clinic

Posted : May 3, 2013 12:33 am

Share:

24 Forums
9,940 Topics
39.9 K Posts
0 Online
6,470 Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed

Powered by wpForo Powered by wpForo version 2.4.0