CMS Clarifies Rules for HIPAA Compliance when Texting Patient Data

CMS has clarified rules regarding HIPAA compliance for texting patient data, permitting the practice among healthcare teams within hospitals and critical access hospitals, provided it's done through a HIPAA-compliant secure platform. The agency emphasized the importance of maintaining data security, encryption, and author identification integrity. While computerized provider order entry remains the preferred method, incorporating texting into electronic health records is acceptable, but rigorous security measures must be in place. This clarification follows concerns raised in 2018 regarding record retention, privacy, and security. Despite widespread texting adoption, challenges persist, including the high volume of messages and a lack of shared understanding among clinicians.