Secure messaging (MU2))

MU Requirements

Per ONC

Taken from ONC Final Rule

(3) Ambulatory setting only—secure messaging. Enable a user to electronically send messages
to, and receive messages from, a patient in a manner that ensures:
Page 468 of 474
(i) Both the patient (or authorized representative) and EHR technology user are authenticated;
and
(ii) The message content is encrypted and integrity-protected in accordance with the standard
for encryption and hashing algorithms specified at § 170.210(f).