E-mails that transfer information with patient information should be encrypted so that only authorized parties can decrypt the information.  There are two ways to encrypt e-mail: end to end or at the gateway. Before selecting an e-mail encryption solution decided if you want (or need) End to End or Gateway.

..

End to end e-mail encryption protects e-mails stored inside each e-mail box (either on a server or locally stored on computer). End to end e-mail encryption protects messages from being read by e-mail administrators and anyone that has access to the user’s e-mail box or computer (if using POP3 or IMAP to retrieve messages). Although it requires client software to be deployed to all users it is the most comprehensive method of encrypting e-mail.

..

Gateway encryption does not protect messages in each users mailbox. It does, however, encrypt and decrypt messages as they leave from and arrive to the e-mail server. Gateway encryption is easier to deploy because it does not require client software deployment to each user. Instead, email is encrypted and decrypted using policies or even keywords inside messages.  Since all messages are required to pass through an encryption gateway (even emails that do not require encryption) substantial hardware could be required to host the e-mail gateway encryption system. Since the gateway performs the encryption and decryption function the sensitive messages stored in each user’s mailbox are decrypted and are not protected.

..

There are various software packages that sell e-mail encryption solutions. There are even hosted e-mail encryption services that for a monthly or yearly fee provide you with software and a service to encrypt e-mails. The key question to consider is whether or not you need e-mails to be secured inside the e-mail box or if its sufficient for e-mails inside the e-mail box to be unencrypted but encrypted on the way in and out of your network. Remember that sent e-mails are typically stored in your “sent items” folder. Do these sent e-mails need to be encrypted? If so, you need an End to End solution.

..

Still not sure which is right for you? Feel free to e-mail or call us and we will be more than glad to explain this important topic in more detail.