Sensitive Healthcare Data Distribution and Access
Secure email solution to distribute healthcare personal data
Customer
-
A large healthcare corporation in the Nordics managing both occupational and private healthcare clients
-
30000+ employees and private practitioners
-
Going through the process of digitalization and investing in the effectiveness and quality of care in all its business areas
Challenge: Managing sensitive health data in an extensive network of employees, private practitioners, and patients
Compliance
Health data is highly sensitive, confidential, and restricted in nature and therefore under a lot of regulation when it comes to how it is managed and shared.
One of the main concerns and requirements is to have a comprehensive audit trail of who, how, when, and to whom the data has been delivered.
Security
Distributing relevant patient data to patients outside the healthcare facility is challenging. Traditional mail is slow and expensive, but sensitive data cannot be sent using regular mail - it requires using registered mail.
Regular email services are not secure enough and do not fulfill the legal requirements and standards.
Recipient verification
With registered mail, this is done by asking for proof of identification before the mail is handed over. In the case of email, regular email services offer no way to verify that the person on the other end of the communication is the intended data recipient.
Solution: Encrypted email platform to fully secure sensitive communications and data sharing
The healthcare corporation had four prerequisites for the solution:
-
identity verification
-
tamper-evident technology
-
comprehensive audit trail
-
it needs to function with any existing email service with no additional email accounts needed
Security
Users can choose a security level for the content: sensitive, confidential, or restricted. The recipient then needs to authenticate using a PIN code or strong electronic authentication.
Secure Mail can automatically encrypt emails considered confidential or block sending of such emails, depending on configured rules and data security policies.
Encryption
Messages and data are stored in an encrypted form, and the recipient receives a notification message with a protected link leading to the encrypted message, making it tamper-proof. The recipient reads the message over a secure browser connection.
Secure Mail creates audit trails and statistics of how the confidential material is being handled.
Integration
Secure Mail is an add-on to the existing email service, so sending a secure email is possible and easy with the customer's regular email client.
The recipient can reply using the same secure channel, open and save attachments (up to 1GB), or save the original message in various formats.
An external party can also send a confidential encrypted message with a browser-based sending function, requiring no license.
Benefits
Compliant
Healthcare data protection and sharing in a compliant manner - the customer meets stringent healthcare data protection requirements (HIPAA).
Secure
Sharing data with different groups (employees, partners, patients) is secure and effortless.
The Zero Access principle is followed – SSH, as the solution provider, does not have access to the contents of emails on their servers.
Easy-to-use
With Secure Mail, sending and protecting confidential emails is straightforward - using the customer's regular email client with the same functions in use.
