Complying under HIPAA1, SOX2 and GLBA3 laws, outbound email and file attachments must be sent securely and encryption is the best method. MX LockTM provides for customizable compliance rules that can be uniquely tailored to your business. The InterceptorTM supplies an auditable and archived report of the security used for all mail leaving the mail server. More importantly, these reports are readily available for a HIPAA or GLBA audit.
MX Lock - Internal Flow Logic
In compliance with HIPAA rules, all outbound emails are scanned for confidential patient data, and secure encryption is forced before records can leave in an email. Likewise, complying with GLBA rules, all outbound emails are scanned and those containing sensitive content are blocked and reported to management before transmission can occur. This prevents the release of company trade secrets, intellectual property and other proprietary and sensitive data or images. Custom IT policy rules can be made to limit specific records and subject matter, to specific employees as may be authorized by your IT administrator, they must have permission under your IT policies and only if they are sending to verified and trusted recipients.
PROOF OF COMPLIANCE
MX Lock provides the transaction record detail necessary to withstand a HIPAA and GLBA audit. MX Lock records every transaction of the communication process including information of the:
-
Sender
-
Email sent time
-
Recipient
-
Recipient's IP address
-
Email access time
-
Encryption trigger
TYPES OF COMPLIANCE
- Health Insurance Portability and Accountability Act (HIPAA) of 1996
Complying under the Health Insurance Portability and Accountability Act (HIPAA) of 1996 - Section 13400 and the Health Information Technology for Economic and Clinical Health (HITECH/ARRA) Act of 2009 - Section 13400, all outbound email and file attachments MUST be sent securely and encryption is the best method. MX Lock comes fully equipped with a HIPAA encryption engine (also known as the Intelligent Content Scanning engine) and allows for customizable compliance rules that can be uniquely tailored to meed your business needs. The IT administrator can implement specific rules to force encrypt emails based on their content or he/she can let the HIPAA encryption engine do its business.
When sensitive/confidential data is matched, MX Lock will encrypt and deliver the email only to the pre-authorized recipients (regardless of email/attachment size). Only users with proper credentials can send encrypted emails and only trusted recipients with accurate credentials can decrypt and view the content of the email. MX Lock is an impenetrable lock on patient/medical records assuring full HIPAA compliance.
Complying under the Gramm-Leach-Bliley Act (GLBA) of 1999 - Section 501, all outbound email and file attachments containing trade secrets, intellectual property and other proprietary and sensitive data or images MUST be sent securely and encryption is the best method. MX Lock automatically scans outbound emails for specific content (customizable by the IT administrator) and encrypts emails that trigger any custom policies. Only users with proper credentials can send encrypted emails and only trusted recipients with accurate credentials can decrypt and view the content of the email. MX Lock is an impenetrable lock on your company's trade secrets and confidential records assuring full GLBA compliance.
Under Sarbanes-Oxley (SOX) Act of 2002 - Section 404, all inbound and outbound email MUST be archived. Organized archiving of email records using MX Lock for SOX compliance can be as simple as routing a blind copy of all email based on custom settings. MX Lock provides IT administrators with two options.
-
All inbound email can be blind-copied (BCC:) to an archival email address. All outbound email can be blind-copied (BCC:) to the same or different archival email address.
-
Emails from specific domains or email addresses can be blind-copied (BCC:) to specific archival email addresses.
1 HIPAA - Health Insurance Portability and Accountability Act (1996).
2 SOX - Sarbanes-Oxley Act (2002).
3 GLBA - Gramm-Leach-Bliley Act (1999).
Interceptor, MX Lock, MX Mercury and Paladin MX are trademarks of Espion International, Inc. Information contained herein is for informational purposes only. Please consult your IT professional for advice in the application and use of these products and services. Information is subject to change without notice. Please consult Espion International, Inc. for more current information.
