Thanks for all the help above. I thought email might be a possibility but then I saw other security threads where email does not meet HIPAA so ? going in circles. This is so much fun.
Donald Phillips MD
Cedar Hill, TX
It could be secure assuming you have either hosted encryption or encrypt the file prior to sending. You'd have to call and tell them the password or supply them with a key file for the latter choice. Another problem with the latter choice is a lot of people don't know how to open the files. Usually you need some sort of software like AxCrpyt, TruCrypt, or 7-Zip (AES 256 Bit) to decrypt the files. It still surprises me that many people still don't know what a zip file is, but whatever... However it won't really help since the requirement adds this clause: "...not the capabilities of uncertified or other vendor-specific alternative methods for exchanging clinical information."