500
True or False: In certain cases, HIPAA says it's OK for providers to send unsecured/ unencrypted e-mails containing a patient's protected health information (PHI) to the patient.
What is "TRUE"?
According to HIPAA, if a provider explains the risks of unsecured e-mail, but the patient attests in writing to understand the risks, it’s not a breach if an e-mail sent to the patient is inappropriately accessed.