Responding to E-Mail Requests Containing PHI and PII

In general, confidential information may be transmitted over the Internet (external e-mail)
only if:

• An acceptable mode of encryption is used to protect the confidentiality and integrity of the data (i.e. Voltage Secure Mail, agency approved e-mail encryption software
• An authentication or identification procedure is employed to assure that both the sender and recipient of the data are known to each other and are authorized to receive and decrypt the information.