Submitting PHI via Email

We do not have a clearly written, definite policy at this time re sending PHI via email. 

I have been told by Clearbearing, (and I'm paraphrasing) 'if you can submit the information any other way BESIDES email, then do. Otherwise, if there isn't any other way, you can use email as it is encrypted, but we don't want to put too much stock in that' (again, paraphrasing, but that is the main gist of it). 

I also connected with Trevor and his answer was, (this time I'm quoting), "This needs a check list: if there is no portal, secure fax, etc. then email. Technically, PedsOne is safe from our end sending it as we have all of our controls in place, however, email sending is high risk even from the proper address standpoint, let alone technical. So for now, your advice stands"  (my advice is just echoing what CB told me above). 

I hope this isn't too confusing. 

I know Trevor is actively working with Clearbearing on a formal protocol, as the payers are requesting electronic submission via email more and more. 

Let me know if you have any further questions! 

I'm closing this ticket as 'resolved' even though we're still working on this issue in the background.