{"id":1602,"date":"2023-08-11T02:20:20","date_gmt":"2023-08-11T02:20:20","guid":{"rendered":"https:\/\/kleetos.com\/?page_id=1602"},"modified":"2025-03-18T08:03:20","modified_gmt":"2025-03-18T08:03:20","slug":"faqs","status":"publish","type":"page","link":"https:\/\/brightsquid.com\/us\/faqs\/","title":{"rendered":"FAQs"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Frequently Asked Questions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n
\n
\n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n What is Brightsquid? <\/span>\n\n <\/div>\n
\n

Brightsquid Secure Communications Corp. delivers modern communications services and privacy compliance support that help healthcare teams operate more quickly and easily.<\/p>

We offer our privacy expertise to assist clinics and organizations with on-going privacy compliance in the form of Privacy Impact Assessments (PIA), compliance and breach prevention training, breach assessment and reporting, and more.<\/p> <\/div>\n <\/div>\n

\n
\n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n What is Brightsquid Secure-Mail? <\/span>\n\n <\/div>\n
\n

Healthcare data delivery done right.<\/span><\/p>

Closely modeled after email, Brightsquid Secure-Mail is a closed, private messaging and large file transfer service that connects all members of any healthcare team including patients, to simplify communication and increase access to information.\u00a0<\/span><\/p>

  • Communicate with anyone<\/span><\/li>
  • 500MB file attachments<\/span><\/li>
  • Shared clinic inbox<\/span><\/li>
  • Automatic breach prevention<\/span><\/li>
  • Read receipts<\/span><\/li>
  • Message recall<\/span><\/li>
  • Spam free<\/span><\/li>
  • Ransomware blocking<\/span><\/li><\/ul>

    Clinics that use Secure-Mail instead fax, mail, and phone reduce overhead costs, save staff hours of time each week, and create a calmer environment for effective delivery of care.<\/span><\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Who uses Brightsquid? <\/span>\n\n <\/div>\n
    \n Brightsquid is the trusted leader in digital healthcare data delivery for all healthcare providers including medical offices, dentists, allied health, specialists, labs, and patients. <\/div>\n <\/div>\n
    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Where did the name Brightsquid come from? <\/span>\n\n <\/div>\n
    \n

    Brightsquid was born from the need to share medical images with colleagues around the world in a way that was fast and compliant with privacy laws while protecting patient information to the letter of the law.One of our founders, a radiologist, could only compliantly share images with experts for consultation by mailing a burned disk or memory stick. Delivery often took too long or the data showed up damaged.
    When he drew a diagram of his idea for a better way, he saw that it resembled either a spider or a tentacled sea creature.
    Around that time he became aware of a species of bioluminescent squid that live in the dark depths of the ocean. He realized that, just as x-rays shine light to areas he cannot easily see, so does Secure-Mail bring light to healthcare decision making with greater information accessibility. And so Brightsquid was named as homage to those cute little creatures that bring light where there is darkness.<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Does Brightsquid comply with privacy regulations? <\/span>\n\n <\/div>\n
    \n Yes. We have many safeguards in place beyond encryption to achieve compliance.\nBrightsquid is audited by third parties to ensure continued compliance with HIPAA, PIPEDA, the HIA, and other important regional regulations. \n <\/div>\n <\/div>\n
    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Can I use Brightsquid when I am away from the office? <\/span>\n\n <\/div>\n
    \n Yes. Brightsquid is a web-based service accessible anywhere through modern web browsers including on your mobile phone or tablet. \nThere is no application to download or update, so you\u2019re always using the most current version.\n <\/div>\n <\/div>\n
    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Can I try Brightsquid Secure-Mail prior to purchasing a subscription? <\/span>\n\n <\/div>\n
    \n

    Yes. Every new signup receives a 4 week free trial. That way, there\u2019s no charge while you work with us to find the ways Secure-Mail works best in your environment and get your templates and contacts set up.<\/p>

    A credit card is required as part of your necessary validation and security protocols. No charges are made until your trial is over.<\/p>

    Anyone invited to collaborate with a current subscriber gets free access to our service as well. Patients can always use Secure-Mail free of charge.<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Is training available for Secure-Mail? <\/span>\n\n <\/div>\n
    \n

    Training is part of every new subscription. There is a training section in all accounts that includes Secure-Mail walkthroughs, tips and tricks, as well as how to\u2019s for specific job functions.
    Users quickly discover that our secure email service is very user friendly as it is closely modeled after some of the most widely used email services in the world.<\/p>

    Our support center and knowledge base provide detailed guides on how Brightsquid service and features are used. And the Brightsquid Support Team is available for phone, email, and chat support every business day.<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n What is a Privacy Impact Assessment (PIA)? <\/span>\n\n <\/div>\n
    \n

    A PIA is an in depth appraisal of how an organization, office, or clinic proposes to collect, use, and handle or disclose patient information including a documented plan to address potential risks to patient privacy.<\/p>

    The result is a declaration that your clinic understands how, and has sufficient processes in place, to protect the information of your patients and serves as a blueprint for protecting your clinic against breaches.<\/p>

    In Alberta, Section 64 of the Health Information Act (HIA) mandates submission of a Privacy Impact Assessment for review by the Office of the Information and Privacy Commissioner (OIPC) for all 11 named custodian types.<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Who needs a PIA? <\/span>\n\n <\/div>\n
    \n

    Every clinic can benefit from the security of a PIA. In Alberta, Canada, every custodian of patient data (any person or organization involved in the collection, use and disclosure of health information) is required by section 64 of the Health Information Act to prepare a privacy impact assessment.<\/p>

    Section 2 of Alberta\u2019s Health Information Act Regulation (\u201cHIAR\u201d) designates certain health professionals as custodians:<\/p>

    Regulated members of the Alberta College of Pharmacists;
    Regulated members of the Alberta College of Optometrists;
    Registered members of the Alberta Opticians Association;
    Regulated members of the Alberta College and Association of Chiropractors;
    Regulated members of the College of Physicians and Surgeons of the Province of Alberta;
    Registered members of the Alberta Association of Midwives;
    Registered members of the Alberta Podiatry Association;
    Regulated members of the College of Alberta Denturists;
    Regulated members of the Alberta Dental Association and College (as of March 1, 2011):
    Regulated members of the College of Registered Dental Hygienists of Alberta (as of March 1, 2011); and
    Regulated members of the College and Association of Registered Nurses of Alberta (as of September 1, 2011).<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Do I need to have all required privacy policies and procedures in place before submitting my PIA? <\/span>\n\n <\/div>\n
    \n No. A PIA is a declaration that your clinic understands its responsibilities and will implement the enclosed policies and procedures. However, simply having an approved PIA does not make your clinic compliant. You will need to enact the policies and procedures outlined within your PIA.\n <\/div>\n <\/div>\n
    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Can I write a PIA myself? <\/span>\n\n <\/div>\n
    \n

    Yes. Anyone can complete a PIA given enough time to dedicate toward learning the requirements, understanding the document, and writing the clinic\u2019s declaration of patient privacy control in alignment with the expectations of the OIPC or regional regulatory body.<\/p>

    For a detailed look at which aspects of clinic operations must be considered, download the Privacy Compliance Checklist.<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n How long does it take to complete a PIA? <\/span>\n\n <\/div>\n
    \n

    Depending on the clinic, a PIA can be 350 pages or more. The document must cover all aspects of how patient information is handled including staff training and access, physical and digital chart storage and destruction, software used, and more.<\/p>

    For a detailed look at which aspects of clinic operations must be considered, download the Privacy Compliance Checklist.<\/p>

    Time to completion can vary depending on how much time can be dedicated to the project regularly without sacrificing other duties. Inexperienced individuals have reportedly taken hundreds of hours to complete a clinic PIA.<\/p>

    Often, after review, the OIPC will require changes, or even complete rewrites of PIAs submitted without the proper structure and regulatory interpretation.<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n What happens if a clinic doesn\u2019t have a PIA? <\/span>\n\n <\/div>\n
    \n

    The biggest risk of not having a PIAis that your clinic is more susceptible to privacy breaches. A properly structured PIA investigates all appropriate areas of risk and establishes safeguards that reasonably protect the information in your control. It is not reasonable to assume privacy compliance is \u201ccommon sense\u201d.<\/p>

    There are no fines for not having a PIA. However, in the event of a privacy incident investigation, the absence of a PIA indicates a lack of preparation that usually translates into non compliant operations.<\/p>

    A PIA is an internal document that can be used to defend the actions of a clinic in the event of a breach if that clinic was operating within the approved processes and procedures established within the PIA.<\/p>

    Without the ability to prove that you\u2019ve taken steps to assess and plan for privacy compliance according to legal requirements, your clinic is at significant risk of penalty when a breach does happen.<\/p>

    If you\u2019re able to demonstrate you were following processes explained in your accepted PIA but a breach happened anyway, you\u2019ll be in a much better position.<\/p>

    In Alberta, fines for non-compliance can range from $2,000 to $500,000. Elsewhere, you are at greater risk of suffering a privacy breach. Recovering from a privacy breach costs on average $408\/patient record involved.<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Who is checking to make sure clinics are in compliance? <\/span>\n\n <\/div>\n
    \n

    The OIPC has not been conducting audits of individual clinics. Investigations are launched upon receipt of a complaint. If a patient, collaborating clinic, or employee feels compelled to report a clinic for mishandling of patient information, the OIPC will examine that clinic\u2019s policies and procedures as well as the reported incident.<\/p>

    The Health Information Act specifically states that: \u201cAn individual who makes a request to a custodian for access to or for correction or amendment of health information may ask the Commissioner to review any decision, act or failure to act of the custodian that relates to the request.\u201d<\/p>

    Many professional colleges do require a PIA for professional registration and before a new clinic is opened. Many also conduct reviews that examine PIAs for all appropriate inclusions to ensure compliance.<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n How much does a breach cost? <\/span>\n\n <\/div>\n
    \n

    The average cost of a breach beyond fines is $408 for each patient chart lost. That cost is made up of IT support, required notifications, identity monitoring for each affected patient, and other remediation measures.
    Recovery costs from privacy breaches caused by cyber attacks are the second highest in healthcare.<\/p>

    89% of businesses that suffered a ransomware attack in 2022 said the ransom they had to pay to get their data back (average = $100,000) was not the biggest associated cost. 1 in 3 companies infected by ransomware that don\u2019t don\u2019t pay the ransom still incur costs over $50,000.<\/p>

    Some statistics indicate that clinics publically known to have suffered a loss of patient information will see a 40-70% reduction in returning and new patients.<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n How do privacy breaches happen? <\/span>\n\n <\/div>\n
    \n

    A breach is any unauthorized access to protected patient information and can result from loss or theft of equipment such as cell phones or computers, misdelivery of faxes, email and mail, improper disposal of charts or files, or system infiltration by hackers just to name a few.<\/p>

    Healthcare is the only industry in which more breaches happen from internal sources rather than external sources. However, increasingly, breaches are a result of outside hackers rather than internal error. Ransomware attacks are becoming common in healthcare and there have already been a number of cases involving Alberta based clinics falling victim to ransomware attacks that rendered patient data inaccessible until a ransom was paid.<\/p>

    A study by Stanford University found that human error was a factor in 88% of breaches. That includes misdelivery of faxes, putting email addresses in a To or Cc field instead of Bcc and other common errors.<\/p>

    94% of computer viruses are delivered by email.<\/p>

    33% of phishing emails are opened.<\/p> <\/div>\n <\/div>\n

    \n
    \n\n \n\n \n <\/i> <\/span>\n \n \n <\/i> <\/span>\n \n <\/span>\n \n \n\n Do patients care about protecting their privacy? <\/span>\n\n <\/div>\n
    \n

    Research shows that only 5% of patients do not care about the safety of their privacy. Almost 40% of Canadians are willing to travel up to 50km for care if they believe local clinics aren\u2019t safe with their information.<\/p>

    90% of healthcare data breaches caused by cyber attacks resulted in a loss of business.<\/p>

    Some statistics indicate that clinics publically known to have suffered a loss of patient information will see a 40-70% reduction in returning and new patients.<\/p> <\/div>\n <\/div>\n <\/div>\n <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

    Frequently Asked Questions What is Brightsquid? Brightsquid Secure Communications Corp. delivers modern communications services and privacy compliance support that help healthcare teams […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-1602","page","type-page","status-publish","hentry"],"yoast_head":"\nHIPAA Compliant Email FAQs - Brightsquid<\/title>\n<meta name=\"description\" content=\"Let the experts answer your questions about HIPAA Compliant emails and encrypted email solutions for healthcare.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/brightsquid.com\/faqs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"FAQs\" \/>\n<meta property=\"og:description\" content=\"Let the experts answer your questions about HIPAA Compliant emails and encrypted email solutions for healthcare.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/brightsquid.com\/faqs\/\" \/>\n<meta property=\"og:site_name\" content=\"Brightsquid US | Simplify Clinic Operations, Prevent Privacy Breaches\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-18T08:03:20+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/brightsquid.com\/us\/faqs\/\",\"url\":\"https:\/\/brightsquid.com\/faqs\/\",\"name\":\"HIPAA Compliant Email FAQs - Brightsquid\",\"isPartOf\":{\"@id\":\"https:\/\/brightsquid.com\/us\/#website\"},\"datePublished\":\"2023-08-11T02:20:20+00:00\",\"dateModified\":\"2025-03-18T08:03:20+00:00\",\"description\":\"Let the experts answer your questions about HIPAA Compliant emails and encrypted email solutions for healthcare.\",\"breadcrumb\":{\"@id\":\"https:\/\/brightsquid.com\/faqs\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/brightsquid.com\/faqs\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/brightsquid.com\/faqs\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/brightsquid.com\/us\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"FAQs\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/brightsquid.com\/us\/#website\",\"url\":\"https:\/\/brightsquid.com\/us\/\",\"name\":\"Brightsquid US | Simplify Clinic Operations, Prevent Privacy Breaches\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/brightsquid.com\/us\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"HIPAA Compliant Email FAQs - Brightsquid","description":"Let the experts answer your questions about HIPAA Compliant emails and encrypted email solutions for healthcare.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/brightsquid.com\/faqs\/","og_locale":"en_US","og_type":"article","og_title":"FAQs","og_description":"Let the experts answer your questions about HIPAA Compliant emails and encrypted email solutions for healthcare.","og_url":"https:\/\/brightsquid.com\/faqs\/","og_site_name":"Brightsquid US | Simplify Clinic Operations, Prevent Privacy Breaches","article_modified_time":"2025-03-18T08:03:20+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/brightsquid.com\/us\/faqs\/","url":"https:\/\/brightsquid.com\/faqs\/","name":"HIPAA Compliant Email FAQs - Brightsquid","isPartOf":{"@id":"https:\/\/brightsquid.com\/us\/#website"},"datePublished":"2023-08-11T02:20:20+00:00","dateModified":"2025-03-18T08:03:20+00:00","description":"Let the experts answer your questions about HIPAA Compliant emails and encrypted email solutions for healthcare.","breadcrumb":{"@id":"https:\/\/brightsquid.com\/faqs\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/brightsquid.com\/faqs\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/brightsquid.com\/faqs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/brightsquid.com\/us\/"},{"@type":"ListItem","position":2,"name":"FAQs"}]},{"@type":"WebSite","@id":"https:\/\/brightsquid.com\/us\/#website","url":"https:\/\/brightsquid.com\/us\/","name":"Brightsquid US | Simplify Clinic Operations, Prevent Privacy Breaches","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/brightsquid.com\/us\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/pages\/1602"}],"collection":[{"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/comments?post=1602"}],"version-history":[{"count":37,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/pages\/1602\/revisions"}],"predecessor-version":[{"id":6556,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/pages\/1602\/revisions\/6556"}],"wp:attachment":[{"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/media?parent=1602"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}