2 min read

7 easy steps to include PHI in marketing emails

Hand writing in notebook next to email marketing concept icons

Learn how you can send protected health information (PHI) in healthcare email marketing in 7 simple steps in our blog.

Using PHI to personalize healthcare marketing emails can be transformative for your patients. It allows you to talk to them about specific conditions, treatment options and advice. The impact can be life-changing.

However, you cannot send PHI in email unless it's HIPAA compliant. Read on to learn how to reach your patients through personal and HIPAA compliant email marketing in 7 simple steps.

 

7 easy steps to include PHI in healthcare email marketing

 

1. Use a HIPAA compliant email marketing platform, like Paubox Marketing

2. Send a warm-up email to confirm recipients' email addresses before you send any PHI

Before sending any marketing messages that include PHI, send everyone on your email list a message asking them to confirm their identity. This is the perfect way to ask them to opt in as well. 

3. Have patients opt in to marketing emails

If you plan on sending emails that fall under HIPAA’s definition of marketing, ensure your patients authorize receiving messages from you by:

  1. Obtaining opt-in authorization for marketing emails, as required by the HHS
  2. Including the CAN-SPAM Act unsubscribe option for all marketing messages

A double opt in is a route to consider to confirm identity and willingness to receive healthcare emails. 

4. Use a "send from" address that an actual human monitors

Do not send email from "no-reply@yourdomain.com" or any other email address that someone on your team will not read. 

It is important that people can easily contact you if they are not the person you think they are. The "send from" email address can easily be edited in Paubox Marketing's admin panel, so configure this properly before sending your first email.

5. Include an unsubscribe button

Having people confirm that they want to receive your emails will ensure that recipients want to hear from you and will be less likely to mark your emails as spam.

In addition, as required by the CAN-SPAM Act, any emails sent with the Paubox Marketing software include an "unsubscribe" button by default.

6. Include your physical address

The CAN-SPAM Act also requires you to include your physical address in your marketing emails. Fortunately, this is a required field in Paubox Marketing, so you will not be able to send an email without it.

7. In the case of Paubox Marketing, include a footer that states the email is secured by a HITRUST CSF certified product

Give your recipients peace of mind, knowing that you are keeping their PHI secured. 

 

Additional healthcare email marketing resources

 

Download: Healthcare's Guide to HIPAA Compliant Email Marketing

 

Spam sushi nigiri with nori wrapped around rice on a bamboo mat

What is the CAN-SPAM Act and how does it impact healthcare email?

In 2003, Congress enacted the CAN-SPAM Act or Controlling the Assault of Non-Solicited Pornography and Marketing Act. CAN-SPAM sets a national...

Read More
Five light bulbs in a row, one glowing yellow against a yellow background

Can you send healthcare promotions via email under HIPAA?

Covered entities can send healthcare promotions via email under HIPAA, provided they obtain written authorization from patients when using their...

Read More
Man sitting on couch blowing nose into tissue while holding box of tissues

Are seasonal health alert emails HIPAA compliant?

Seasonal health alert emails can be HIPAA compliant when appropriate safeguards are in place to protect patients' protected health information (PHI)...

Read More

Subscribe to Paubox Weekly

Every Friday we bring you the most important news from Paubox. Our aim is to make you smarter, faster.