RE: Receipt of PHI

[Michael O'Gorman]

Marcus,   I addressed this identical issue with the Office of civil rights yesterday.  They clearly stated the privacy rule does not mandate encryption (and I do not believe the security rule does either).  Password protection of documents was considered a “reasonable” precaution vs. full blown encryption.   There has been much discussion on this topic and no consensus reached to my knowledge.   As a BA with many CE’s I am advising the CE’s of the privacy rule and informing them of the guidance I received from OCR.   Mike O’Gorman       -----Original Message----- From: Marcus E. McCrory [mailto:[EMAIL PROTECTED] Sent: Friday, March 28, 2003 2:13 PM To: WEDI SNIP Privacy Workgroup List Subject: Receipt of PHI   I would appreciate any suggestions on how a business associate should address the receipt of PHI from a covered entity that has been sent across an open network (without encryption) after the Privacy Rule is enforceable.   Thank you.   Marcus McCrory   --- The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/. These listservs should not be used for commercial marketing purposes or discussion of specific vendor products and services. They also are not intended to be used as a forum for personal disagreements or unprofessional communication at any time. You are currently subscribed to wedi-privacy as: [EMAIL PROTECTED] To unsubscribe from this list, go to the Subscribe/Unsubscribe form at http://subscribe.wedi.org or send a blank email to [EMAIL PROTECTED] If you need to unsubscribe but your current email address is not the same as the address subscribed to the list, please use the Subscribe/Unsubscribe form at http://subscribe.wedi.org ********************************************************************** Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is strictly prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ********************************************************************** --- The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/. These listservs should not be used for commercial marketing purposes or discussion of specific vendor products and services. They also are not intended to be used as a forum for personal disagreements or unprofessional communication at any time. You are currently subscribed to wedi-privacy as: [EMAIL PROTECTED] To unsubscribe from this list, go to the Subscribe/Unsubscribe form at http://subscribe.wedi.org or send a blank email to [EMAIL PROTECTED] If you need to unsubscribe but your current email address is not the same as the address subscribed to the list, please use the Subscribe/Unsubscribe form at http://subscribe.wedi.org