When possible, what is the best way to transfer PHI for routine disclosure of information to insurance companies, attorneys or other legitimate users?

• A. Fax machine
• B. Work e-mail
• C. Personal e-mail
• D. Snail mail

Answer: (D)

Transmitting PHI requires limiting who can access the information and how easily it can be intercepted. When possible, sending a paper copy through traditional mail is often the safer option because it keeps PHI out of electronic networks where it can be hacked, leaked, or misdelivered. A sealed, properly addressed envelope—with a clear confidentiality notice and any necessary authorization—creates a physical barrier and a verifiable record of delivery. Using mail also allows you to use tracking or certified mailing to confirm receipt, and it avoids the risks of digital interception inherent to electronic methods.

By contrast, fax and e-mail introduce opportunities for misdelivery, interception, or unauthorized access. Fax machines can leave PHI on a machine or be sent to the wrong number, and e-mail—especially unencrypted personal or standard e-mail—can be forwarded, hacked, or exposed. Therefore, when the situation permits, traditional mail provides a tangible, controllable path that tends to reduce exposure of PHI for routine disclosures to legitimate recipients like insurers or attorneys.