Question

question 25 of 30
which of the following is not an acceptable way to include phi in an email?
select all that apply
□ message stays within cha email system and recipient is authorized to have access to the phi
□ message is sent from cha email to bidmc provider’s email using email encryption and recipient is authorized to have access to the phi
□ message is sent from cha email to charge nurse at nursing home
□ message is sent from cha email to patient and patient has provided written authorization

Explanation:

To determine the unacceptable way to include Protected Health Information (PHI) in an email, we analyze each option:

• Option 1: Staying within the CHA email system with an authorized recipient is acceptable as the system and recipient are authorized for PHI access.
• Option 2: Sending to a BIDMC provider's email with encryption and an authorized recipient is acceptable (encryption and authorization are in place).
• Option 3: Sending to a charge nurse at a "nursing home" (assuming it's an external or unauthorized setting, or the nurse isn't authorized for this PHI) is unacceptable. Nursing homes have their own systems, and sending PHI to a nurse at a nursing home without proper authorization/secure system (unlike the CHA system or encrypted BIDMC - CHA communication) violates PHI security and privacy rules.
• Option 4: Sending to a patient with written authorization is acceptable as the patient has given permission.

Answer:

B. Message is sent from CHA email to charge nurse at nursing home