HIPAA Breach Notification: The 60-Day Clock Starts Ticking Immediately
A Practical Guide for Rural Health Care Organizations
Covers 45 C.F.R. §§ 164.400-414 (Breach Notification Rule)
HIPAA Security Rule
Using Free Gmail & Hotmail Accounts for Your Health Care Organization IS a HIPAA Violation
"But we tell patients not to email us PHI…"
Spoiler: It doesn't matter. You're still liable.
If your health care organization is using a free Gmail, Hotmail, Outlook.com, MSN, or Yahoo account for any patient-facing communication, you're already in violation of HIPAA—whether you realize it or not. And unfortunately, disclaimers in your footer, verbal warnings to patients, or additional security measures can't change that legal reality.