New Requirement: “Send Secure” Process for Emails

You are here:
Estimated reading time: 1 min

Important Details

Effective February 18th 2025, Natera requires us to follow the “Send Secure” process, which involves encrypting any email containing a patient’s PHI or PII. To remain compliant, please ensure that any screenshots sent do not include patient information.

When to Use Virtru:

  • The Natera Send Secure process must be used when PHI is present within the body of the email or in an attachment.
  • This requirement applies even when sending emails internally.
  • Do not include PHI in the subject line of the email.

How to use Virtru in Salesforce?

Check the ‘Send Securely’ box at the bottom to ensure the message is sent encrypted and secure.

Make sure the signatures in Salesforce include the Confidentiality Notice below:

Confidentiality Notice:This communication contains confidential and/or privileged information protected by HIPAA and/or other laws, and is intended solely for use by the named recipient. If you are not the named recipient, please promptly notify the sender and immediately delete all copies of this email and any attachments, and please do not disclose any of the information contained therein.


 PHI (Protected Health Information): Is any health-related information that can be linked to an individual and is created, used, or stored by a healthcare provider, health plan, or business associate.
Examples of PHI:
  • Patient Name + Medical Info (e.g., “John Doe’s genetic test results”)
  • Medical Record Numbers
  • Insurance/Health Plan Details
  • Billing Information with Medical Services Mentioned
  • Case #
🚫 Example of PHI in an Email (Incorrect):
“You currently have a balance of $650. This is a deductible amount established by your insurance CIGNA. Please check the encrypted email.”
✅ Correct Way (Using Secure Method):
“Your statement is attached. Please check the encrypted email.”

 PII (Personally Identifiable Information) :Is any information that can identify a person, either on its own or when combined with other data.
 
Examples of PII:
  • Full Name
  • Home Address
  • Phone Number
  • Email Address
  • Driver’s License or ID Number
  • Date of Birth
🚫 Example of PII in an Email (Incorrect):
“John Smith’s address is 123 Main St, and phone number is 888-888-888”
✅ Correct Way (Using Secure Method):
“I’ve sent John Smith’s information via a secure channel for review.”
Last Updated : Claudia F ( Feb 17, 2025)
Views: 189