From: Howard C. Berkowitz (hcb@gettcomm.com)
Date: Wed Mar 03 2004 - 14:40:33 GMT-3
At 9:26 AM -0800 3/3/04, Joseph D. Phillips wrote:
>I have been told by vendors that SSNs can be faxed and still be 
>secure enough for HIPAA.
The last time I looked at the HIPAA FAQ's, fax was generally accepted 
as adequately secure for private medical information.  Certainly, 
there are some general practices you'd want to follow, such as a 
cover sheet with confidentiality information.  If the material being 
sent is especially sensitive, you may want to call an actual person 
at the destination and have them tell you when they are physically at 
the fax.
You bring up an interesting point, as HIPAA and other medical privacy 
(and availability) standards and regulations are important to my 
work.  It's pretty far outside the CCIE area, but would there be 
interest if I sponsored a forum or mailing list for it?
This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:13 GMT-3