To meet HIPAA regulations, all external email communication containing personally identifiable information or confidential data must be encrypted. External email communication includes all emails that are sent to any non-USF Health email addresses. All internal email (within USF Health email address groups) are protected by the firewall and do not require encryption. An example of personally identifiable information is patient information which includes the patient's name, SSN, address, and a variety of medical terms such as their MRN diagnosis or procedure. Follow the steps outlined below to encrypt any external email communication that contains personally identifiable information or other confidential data. See also USFPG policy on Electronic Mail containing PHI.
The subject field of the email must contain encrypt: (with the colon) or the email will not be encrypted.
Email sent to recipients within the USF Health network will not be encrypted.
Password must include one special character and be at least 8 characters long. You will use this password in the future.