How do I send a HIPAA compliant email?

  • mandolinfoundation
    Asked on July 25, 2024 at 6:22 PM

    How do I send a HIPAA compliant email?

  • Afzal JotForm Support
    Replied on July 25, 2024 at 6:46 PM

    Hi Mandolin,

    Thanks for reaching out to Jotform Support. To send a HIPAA complaint email first you will need to have a Jotform account with HIPAA enabled plan. After that, if you have a form with PHI fields enabled, this means the data collected with these fields are sensitive healthcare data and cannot be used in an insecure medium. If you want to include the information in emails, you'll have to disable the PHI on the fields. Let me show you how:

    On your forms, each form element has a PHI toggle. You can use this toggle to switch between states.

    How do I send a HIPAA compliant email? Image 1 Screenshot 30

    • PHI (Protected) – means the data collected with this field is sensitive healthcare data and cannot be used in an insecure medium (like Autoresponder or Notification emails).
    • OFF (Not Protected) – means the data collected with this field can be used in an insecure medium.

    Since your account will be HIPAA compliant, all of the fields will be marked as PHI by default. You can change any of them based on what you need. Please note that marking a field as OFF doesn’t change anything about how Jotform stores your data. Your data is always encrypted, even if you turn the PHI on them to OFF. This setting is just a way for us to understand if we can use them in the emails or 3rd party integrations you might have.

    Here is an example email alert. Note how the protected fields were removed:

    How do I send a HIPAA compliant email? Image 2 Screenshot 41

    Use this setting with caution and double-check which fields are set as OFF (not protected) to avoid HIPAA violations.

    Give it a try and let us know how it goes.