Regulate Fax Notice For Free

Is Faxing HIPAA-Compliant? Faxing itself is HIPAA-compliant because it's inherently secure and point-to-point. Fax lines (and most IP fax infrastructure) are considered conduits, meaning they carry PHI but do not access it. However, HIPAA compliance also requires safeguards before sending and after receiving faxes.

A misdirected fax may also be a breach of unsecured PHI requiring notification under the HIPAA Breach Notification Rule.

When sending a fax, include a cover sheet indicating the date and time sent; the recipient's name and fax number; and the sender's name, organization and phone number. The fax cover sheet should NEVER include a patient's name or any other PHI. 2. Include a privacy statement in the fax cover sheet.

Any patient data should be in the fax body and not in any of the data fields. Maintain a copy of the confirmation sheet of the fax transmission, including the necessary data such as time and recipient's number. Confirm fax delivery by phoning the recipient. Received faxes are to be stored in a secure location.

5 Best Practices for HIPAA-Compliant Faxing Never Leave Faxes Unattended. Switch to an Online Fax Service. Use a HIPAA Fax Disclaimer. Keep an Audit Trail. Migrate Files to the Cloud.

Sample HIPAA Disclaimer This facsimile transmission is intended for the sole confidential use of the designated recipients, some or all of which may be protected health information as defined by the federal Health Insurance Portability & Accountability Act (HIPAA) Privacy Rule.

An example of a fax disclaimer statement: If you are not the intended recipient, please be advised that any disclosure, copying, distribution, or use of the contents of this information is strictly prohibited, and that any misdirected or improperly received information must be returned to this company immediately.