Using Free Gmail & Hotmail Accounts for Your Health Care Organization IS a HIPAA Violation
"But we tell patients not to email us PHI…"
Spoiler: It doesn't matter. You're still liable.
If your health care organization is using a free Gmail, Hotmail, Outlook.com, MSN, or Yahoo account for any patient-facing communication, you're already in violation of HIPAA—whether you realize it or not. And unfortunately, disclaimers in your footer, verbal warnings to patients, or additional security measures can't change that legal reality.