A Small Business Search for HIPAA Compliant E-mail Security

This case study is of a small insurance business providing both health and non-health related products which are separated by divisions. HIPAA regulations impact approximately half of the user base in the business. The e-mail communications system is not segregated by divisions. Desktop e-mail clients are separated into two distinctly HIPAA and non-HIPAA divisions. The business is comprised of fewer than 100 member e-mail user base. Approximately half the users transmit Electronic Protected Health Information (EPHI). This number is increasing as the health sector of the business expands.