Confidentiality, Privacy and Security

CDs given to patients with PHI...Encrypted?

  • 1.  CDs given to patients with PHI...Encrypted?

    Posted 07-22-2020 05:24
    For those providing CDs with copies of PHI to patients through the mail, generally, are you encrypting the data as a safeguard in the event the CD is lost or misdirected by the USPS?

    ------------------------------
    Frank Ruelas
    Compliance Professional
    Arizona
    ------------------------------


  • 2.  RE: CDs given to patients with PHI...Encrypted?

    Posted 07-23-2020 07:42

    Yes, unless the patient specifically requests they don't want it encrypted.

     

    Wendy Mangin, MS, RHIA

    Director of Corporate Compliance

     

    Good Samaritan 

    520 S. Seventh St. | Vincennes, Indiana | 47591

    Hospital: 812.882.5220 | Direct: 812.885.3487 

    Fax: 812.885.3912 | wmangin@gshvin.org 

    b326b5f8d23cd1e0f18df4c9265416f7  images   Website | Videos | News | Events

     






  • 3.  RE: CDs given to patients with PHI...Encrypted?

    Posted 07-23-2020 08:34
    Wendy,
    What if the CD is created via the Diagnostic Imaging PACS system or the Cardiac imaging system? We are being told by our department directors that they never come from other sites as protected.
    Thanks,
    Katie

    ------------------------------
    Kathryn Wood, RHIA
    Assist Dir of Information Systems/Privacy Officer
    War Memorial Hospital
    ------------------------------



  • 4.  RE: CDs given to patients with PHI...Encrypted?

    Posted 07-23-2020 08:43

    I am guessing that PACs systems and cardiology applications may differ in their capability to encrypt vs not....if the USPS would lose it, I would consider this a breach if unencrypted......

     






  • 5.  RE: CDs given to patients with PHI...Encrypted?

    Posted 07-23-2020 09:56

    Thank you for responding. I believe a lot of the time these are given to the patient to be hand delivered to another provider, a specialist given that we are a smaller, rural community hospital. Would you still consider encryption if they were safely delivered to the patient? Perhaps I can find some sort of compromise with this group.

    Thanks again!



    ------------------------------
    Kathryn Wood, RHIA
    Assist Dir of Information Systems/Privacy Officer
    War Memorial Hospital
    ------------------------------



  • 6.  RE: CDs given to patients with PHI...Encrypted?

    Posted 07-23-2020 10:03

    When a CD with images is given to a patient to take to a specialist and it is not encrypted, I would think once the patient has it in their possession, you are no longer responsible for what happens to it – the patient's responsibility to get it to the specialist.

     






  • 7.  RE: CDs given to patients with PHI...Encrypted?

    Posted 25 days ago
    If a patient does not want the CD encrypted, when you send or give the CD to the patient, do you include any type of notice that the information on the CD is no longer protected and becomes the patient's responsibility to safeguard their info?

    ------------------------------
    Cynthia Schreiner
    Director, Health Information Management Department
    Graham Hospital
    ------------------------------



  • 8.  RE: CDs given to patients with PHI...Encrypted?

    Posted 24 days ago
    Cynthia...I've not encountered this type of notice you are describing very often.

    The few times I do encounter some type of notice like that which you describe is in the process of informing the patient of the risks with sending unencrypted ePHI to either the patient or to a third party as directed by the patient under the right of access.








    Posted: Saturday


    ------------------------------
    Frank Ruelas
    Compliance Professional
    Arizona
    ------------------------------



  • 9.  RE: CDs given to patients with PHI...Encrypted?

    Posted 07-23-2020 09:33
    Thanks for the responses..

    ------------------------------
    Frank Ruelas
    Compliance Professional
    Arizona
    ------------------------------