HIPPA Compliance

Question

Hello,

How to encrypt emails in Microsoft? I am inquiring about HIPPA compliance.

Answer 1

To encrypt emails in Microsoft Outlook, especially for HIPAA compliance, you can use the following options:

1. Microsoft Purview Message Encryption - Information Rights Management (IRM): This option allows you to encrypt your email messages, converting them from readable text to scrambled cipher text. To use this feature, the sender must have the necessary permissions, which are included in the Office 365 Enterprise E3 license.
2. S/MIME encryption: This is another encryption method available in Outlook, which is expected to be available soon in the new Outlook version.

To apply encryption, you can use the Encrypt button found in the ribbon when composing an email. Additionally, you can configure encryption settings using sensitivity labels to restrict access to content.

It's important to note that IRM protection cannot be applied to messages that are already signed or encrypted using S/MIME, and vice versa.

Using these encryption methods helps ensure that the privacy of email messages is protected, which is essential for compliance with HIPAA regulations regarding the safeguarding of protected health information (PHI).

---

References:

• Security and compliance in new Outlook for Windows
• Health Insurance Portability and Accountability Act (HIPAA) & Health Information Technology for Economic and Clinical Health (HITECH) Act