GP surgery using a standard Gmail account

I.am.Putins.raging.bile.duct

I had to email my GP to request a callback and I noticed they don't use a private email domain just a standard Gmail.

My GPs secretary emailed me back saying my doctor was on annual leave and would call me back when he returned. I didn't share or ask for any private data and perhaps they never do through emails but still I think its a bit lax using a standard Gmail account.

Im wondering if that's poor security considering the amount of cyber attacks we've had in Ireland in our health services.

Maybe have a look at your GPs email address please and see if this is common.

Thanks

Miaireland

GPs have a system called Healthmail that they use to send secure emails with private data and results to other healthcare professionals.

Normally gmail type emails are normally used to request callbacks etc.

I.am.Putins.raging.bile.duct

https://www.boards.ie/discussion/comment/122371073#Comment_122371073

Ah i see thanks

Charles Babbage

https://www.boards.ie/discussion/comment/122371098#Comment_122371098

But a yahoo address would not imply any level of security! Gmail is probably better.

z80CPU

https://www.boards.ie/discussion/comment/122371110#Comment_122371110

Splitting hairs but yes

ItHurtsWhenIP

You could have a doc with their own domain and that might look professional and make you think it is more secure, but their email could be set up on some mickey mouse mail server run by their hosting or IT service provider. That could be waaaay worse than a Gmail account. 🤨

TheDriver

Many places including schools use google packages to handle their domain so a private domain could be handled by google (or equally Microsoft)

GSBellew

https://www.boards.ie/discussion/comment/122371669#Comment_122371669

This above, you could be emailing somebody@anydomain.ie and still be emailing a gmail account.

L1011

https://www.boards.ie/discussion/comment/122371073#Comment_122371073

Which is a Microsoft 365 tenant with heavily restricted (I would say "no", but it has MX records, so can presumably take some inbound; maybe from very specific domains) inbound or outbound transport rules.

I would still worry that occasional mails are sent with patient info outside of it. Main one is sending stuff to the patient in question; the patient obviously doesn't mind getting it but the data remains on their other email systems servers afterwards.

Charles Babbage

https://www.boards.ie/discussion/comment/122371726#Comment_122371726

My GP makes zero use of email for anything. They will print out stuff on a page, but do not send it electronically, nor do they bother copying emails for things like seeking appointments with specialist facilities to me.

There is a security issue, but there is also a need for the general sharing of information with patients and a secure way of doing that.

L1011

https://www.boards.ie/discussion/comment/122372174#Comment_122372174

If they send your prescription to the pharmacy, they're using Healthmail. I don't know any GPs that didn't start doing this during the pandemic although for some it was a massive culture shock.

Charles Babbage

https://www.boards.ie/discussion/comment/122372333#Comment_122372333

My point was that they do not email me, not that they do not use healthmail. But even in the case of prescriptions it would be reasonable to generate a standard document to inform the patient that a prescription had been sent to the pharmacist and copy that to the patient. Then the patient would have a clear record of the dates of the prescription etc.

spaceHopper

Google have a far bigger security budget and know more about it than your GP. If they have 2FA an a strong password then I'd be more than happy for them to use it. Also there is noting stopping them setting up Thunderbird or Outlook as mail client so they only need their PC log in to get and check mail. In any office I'd be surprised if they don't have that setup.

The Black Oil

I used to look at the ICGP's website for work, the 'find a GP' tool. Most didn't list an email address and few had one like info@gppractice.ie

I see some here have Eircom accounts.

https://www2.hse.ie/services/find-a-gp/

tohaltuwi

my GP practice uses Gmail when corresponding to patients re appointments, but Healthmail for medical data communication to other doctors etc

I am always getting offers from various entities for my own email domain, doesn’t always mean it’s secure.