{"id":304,"date":"2017-09-14T14:41:22","date_gmt":"2017-09-14T18:41:22","guid":{"rendered":"http:\/\/eagleassociates.net\/news\/?p=304"},"modified":"2017-09-14T14:42:09","modified_gmt":"2017-09-14T18:42:09","slug":"secure-text-messaging","status":"publish","type":"post","link":"https:\/\/eagleassociates.net\/news\/2017\/09\/secure-text-messaging\/","title":{"rendered":"Secure Text Messaging"},"content":{"rendered":"

Due to the speed and convenience of texting, many physicians use this form of communication to consult with other providers, exchange lab test results, and other patient information. If text messaging is used to transmit or receive electronic protected health information (EPHI), it must be evaluated as part of the covered entity\u2019s Security Risk Analysis. As with all transmissions of EPHI, safeguards must be in place to ensure the integrity and confidentiality of the data.<\/p>\n

There are several secure messaging vendors in the marketplace that offer encrypted mobile applications that will secure messages sent to the provider\u2019s phone, responses sent back, as well as data at rest. Data that is properly encrypted is considered \u201csecure\u201d by Security Rule standards.\u00a0 This means that the data has been rendered unusable, unreadable or indecipherable to unauthorized persons or entities.<\/p>\n

In addition to the threat of malware or interception of text messages, the risks posed by the theft or loss of a smartphone must also be considered.\u00a0 If the EPHI stored on the device is not properly secured, the theft or loss could result in a privacy breach that would not only require notification of affected patients and the Department of Health and Human Services, but also the media if the breach were large enough.<\/p>\n

All text messages containing EPHI, whether encrypted or not, should be managed with the following minimum safeguards:<\/p>\n