Ensuring patient engagement that is HIPAA compliant
Written by Roger Steven
The major reason for which there are widespread violations of the HIPAA Rules for communicating with patients by unencrypted email and text message is that healthcare providers and Covered Entities and their Business Associates are ignorant of the rules. Although the HIPAA Rules are pretty straightforward and easy to follow; providers and Business Associates who don’t implement them in accordance with what is required under the law are at great risk and directly liable for breaking them.
Not many are aware that simple items such as an appointment reminder, Happy Birthday wishes, reminders that a patient is overdue for a checkup or has an outstanding balance on a bill, qualify for a PHI by definition, even though no diagnostics-specific information could be contained in them. These are the finer elements of HIPAA rules that Covered Entities and their Business Associates need to be thoroughly aware of.
Knowing how they can maximize the use of key patient communication tools while protecting themselves and their organization from government penalties and patient lawsuits is of crucial importance. It is important for healthcare providers and Business Associates not to land in serious trouble simply because they didn’t follow the HIPAA Rules for unencrypted electronic communication with patients.
The HIPAA Safe Harbor
Healthcare providers have a mandatory “duty to warn” patients about risks associated with unencrypted email. Even after receiving the warning, if a patient refuses to receive unencrypted emails; healthcare providers and Business Associates must strictly follow the patient's restriction.
HIPAA also offers what it calls the HIPAA “safe harbor”, which frees the provider and the Business Associate from being responsible for unauthorized access of a patient's PHI during transmission and for safeguarding PHI delivered to the patient.
Full understanding of how to be HIPAA compliant with patient engagement
A webinar that is being organized by MentorHealth, a leading provider of professional trainings for all the area of healthcare, will offer learning on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.
Paul R. Hales, an expert on HIPAA Privacy, Security, Breach notification and Enforcement Rules with a national HIPAA consulting practice based in St. Louis, and the author of all content in The HIPAA E-Tool, an Internet-based, Software as a Service product for healthcare providers and Business Associates; will be the speaker at this webinar. please register for this webinar. This course is approved for 1 general credit from the Nevada Board of Continuing Legal Education.
At this webinar, Paul will offer detailed explanation of all the areas conce
ing HIPAA compliant patient engagement. He will explain this topic in the following parts:
o The information that makes a message subject to HIPAA
o The “safe harbor” - How healthcare providers may obtain consent from patients to send PHI in unencrypted email and unencrypted text messages and not be responsible for unauthorized access to the PHI in transmission or when received by the patient
o What a healthcare provider must do if a patient does not agree to receive PHI in unencrypted email or unencrypted text message
o The requirements for a Business Associate to be able to communicate by email or text message with a patient on behalf of a healthcare provider
o How a Business Associate may protect itself from liability for violating HIPAA Rules about email and text messages in its Business Associate Agreement
o What a healthcare provider must do if a patient does not agree to receive PHI in unencrypted emails or text messages
o How healthcare providers and Business Associates may prove they are compliant with the HIPAA Rules through documentation
o The Policies and Procedures healthcare providers and Business Associates must have in place to comply with HIPAA Rules conce
ing communication with patients through email and text messager
The following areas will be covered at this webinar:
o More and more patients like the convenience of email and text message
o The HIPAA “safe harbor” - how you can communicate with patients in the way they prefer and protect your organization
o How healthcare providers and Business Associates can work together to avoid violating HIPAA Rules about email and text message communications with patientsr
This course is of immense value to healthcare providers, dentists, optometrists, physicians, podiatrists, chiropractors, hospitals, Business Associates, those in billing, collection, insurance brokerage, patient engagement and marketing companies.
Fill this form to get more updates about HIPAA
Article author
About the Author
MentorHealth is a comprehensive training source for healthcare professionals. Our trainings are high on value, but not on cost. MentorHealth is the right training solution for healthcare professionals. With MentorHealth, healthcare professionals can make use of the best benefits relating to their professional training.
Further reading
Further Reading
Article
What Does a Podiatrist Do on Your First Visit?
A first podiatry appointment is far less clinical than most people expect. It typically starts with a conversation about your medical history and the specific problem you're dealing with, followed by a look at your footwear, how you stand and walk, and a hands-on assessment of the affected area.
September 16, 2026
Article
3 Reasons Parents Turn To Family Dentists For Cosmetic Enhancements
That is often why parents look to a Family And Cosmetic Dentist instead of chasing quick fixes online.
September 14, 2026
Article
4 Cosmetic Dentistry Options That Boost Everyday Confidence
You might be feeling stuck every time you see your reflection. Maybe you cover your mouth when you laugh, avoid close-up photos, or rehearse how much you will smile before a meeting.
September 14, 2026
Article
5 Questions Parents Should Ask A Family Dentist About Preventive Care
This kind of conversation can also help with cost. Preventive visits, sealants, and fluoride are often easier to manage than fillings, crowns, or emergency care later.
September 14, 2026