Which method is appropriate for transmitting confidential patient data over the Web or Internet?

• A. Only when the recipient is expecting the data and can quickly retrieve it from e-mail
• B. By attaching data to e-mail in an encrypted file
• C. When data are contained on a CD mailed using nondescript packaging
• D. When using encrypted Web connections

Answer: (D)

Transmitting confidential patient data over the Web should be done with encryption in transit. Encrypted Web connections, like HTTPS using TLS, protect information as it travels between the sender and recipient, so if the data is intercepted, it remains unread. TLS also helps verify the server’s identity and ensures the data isn’t tampered with along the way, which is essential for patient confidentiality and data integrity.

Other options rely on potential insecure channels or require additional steps that aren’t reliable for web-based transmission: simply waiting for the recipient to fetch data via email exposes the message to multiple servers and potential interception; encrypting a file attached to email still depends on the email system and leaves metadata and delivery paths unprotected; mailing data on a physical CD uses a non‑web channel and isn’t suitable for online transmission.

So, encrypted Web connections provide the appropriate, practical protection for sending confidential patient information over the Internet.