"HIPAA allows covered entities and their business associates to communicate e-PHI with patients via e-mails and texts if either [1] the e-mails and texts are encrypted and/or are otherwise secure; or [2] the covered entity or business associate first warns the patient that the communication is not secure and the patient elects to communicate via unsecure e-mail or text, anyway. When it comes to communicating with non-patients, the covered entity or business associate must generally ensure that its e-mail or texts comply with relevant Privacy and Security Rule standards."  MORE >>