Question

question 17 of 30
which of the following is not an acceptable way to include phi in an email?
select all that apply
□ message stays within cha email system and recipient is authorized to have access to the phi
□ message is sent from cha email to bidmc provider’s email using email encryption and recipient is authorized to have access to the phi
□ message is sent from cha email to charge nurse at nursing home
□ message is sent from cha email to patient and patient has provided written authorization

Explanation:

To determine the unacceptable way to include Protected Health Information (PHI) in an email, we analyze each option:

• Option 1: If the message stays within the CHA email system and the recipient is authorized, this is acceptable.
• Option 2: Sending to a BIDMC provider's email with encryption and an authorized recipient is acceptable.
• Option 3: Sending to a charge nurse at a nursing home (a non - CHA, non - authorized (in terms of CHA's PHI system) external entity) without proper authorization for that external entity to access CHA's PHI is not acceptable. Nursing homes are external to the CHA email system and charge nurses there may not be authorized to access CHA's PHI.
• Option 4: Sending to a patient with written authorization is acceptable as the patient has given permission.

Answer:

B. Message is sent from CHA email to charge nurse at nursing home