Encryption

Encryption is the process of making information unreadable to unauthorized viewers. We can encrypt all kinds of content. For example, we can encrypt messages, files, folders, entire devices, and much more.

There are regulations governing the handling of protected information and significant penalties for non-compliance. Encryption helps guarantee the safety of a patient’s information and provides a safe harbor for the institution from having to notify patients, the media and the government in the event a breach or other loss of protected health information occurs.

All Protected Health Information must be encrypted. PHI is information related to the provision of past or present healthcare to patients and can include patient name, date of birth, date of service, MRN, invoice number, social security number, address, email address, facial photos or other identifying photos.

• Portable devices – such as flash drives and smart phones.
• E-mail attachments that contain PHI and go outside the secure Washington University/BJC Healthcare.
• Laptops
• Desktops – if protected health information is stored on the hard drive.

Follow our guide on Encrypted Email Instructions.

• WashU Box
• Encrypted email

Mac FileVault

The Guide to Using BitLocker Encryption on Windows 10

The university has many resources available to assist you. The first resource is your department or schools IT support staff who will be able to assist in determining which laptops, workstations, and departmental servers need encryption software. They will also assist you with encrypted flash drives and document encryption.