Protect Fax Permit For Free

When sending a fax, include a cover sheet indicating the date and time sent; the recipient's name and fax number; and the sender's name, organization and phone number. The fax cover sheet should NEVER include a patient's name or any other PHI. 2. Include a privacy statement in the fax cover sheet.

Is Faxing HIPAA-Compliant? Faxing itself is HIPAA-compliant because it's inherently secure and point-to-point. Fax lines (and most IP fax infrastructure) are considered conduits, meaning they carry PHI but do not access it. However, HIPAA compliance also requires safeguards before sending and after receiving faxes.

5 Best Practices for HIPAA-Compliant Faxing Never Leave Faxes Unattended. Switch to an Online Fax Service. Use a HIPAA Fax Disclaimer. Keep an Audit Trail. Migrate Files to the Cloud.

Steps to safer faxing: Always use a cover letter. To prevent numbers from being mis-dialed, use saved speed-dial numbers for recipients you fax frequently. ... For any new recipient, verify the number with a test email before sending PHI. Have policies in place for what to do if a fax is sent to the wrong number.

Authentication: Two-factor (Password, PIN) authentication, independent authentication, customizable role-based permissions, IP restricted access, and automatic logoff during inactivity should be utilized to eliminate unwarranted user access.

How to Protect Patient Health Information: Key Steps Encrypt Data at Rest and In Transit. ... Configure User Settings Correctly. ... Vet Third-Party Security. ... Create a device security policy and use MDM software. ... Keep Your Systems Updated. ... Educate Employees and Create a Security Culture. ... Implement Physical Security Controls.

When faxing PHI, use fax cover sheets that include the following information: Sender's name, facility, telephone and fax number. Date and time of transmission. Number of pages being faxed including cover sheet. Intended recipient's name, facility, telephone and fax number.

3. Use a HIPAA Fax Disclaimer Date and time of fax transmission. Receiver's complete name, fax number, and organization. Sender's complete name, fax number, and organization. Patient's case number or code (instead of their name) HIPAA disclaimer prohibiting the distribution of the received information.