HIPAA Requirements for Fax Transmission

The HIPAA Privacy Rule permits physicians to disclose health information to another health care provider for treatment purposes only. This can be done by fax or other means. Covered entities must have in place reasonable and appropriate administrative, technical and physical safeguards to protect the privacy of protected health information that is disclosed using a fax machine. Examples of measures that are reasonable and appropriate in such a situation include placing the fax machine in a secure location to prevent unauthorized access to information (see 45 CFR164.530(c)). Click here to learn more and visit the United States Department of Health & Human Services.