---
title: HIPAA-Compliance, Fax, and Real-Time Transmission
canonical: https://telnyx.com/resources/fax-hipaa-compliance-real-time
---
# HIPAA-Compliance, Fax, and Real-Time Transmission

[Back to blog](https://telnyx.com/resources)

**Fax**

# Real-time HIPAA compliant fax: an overview 

HIPAA compliant faxes sent over T.38 SIP trunks have encrypted signaling and media, with no data stored on either end.

By [Odhran Reidy](https://telnyx.com/authors/odhran-reidy)

The fax machine remains the dominant [method of communication in healthcare](https://telnyx.com/resources/why-hospitals-use-fax). Though fax is considered outdated in other settings, it remains a reliable way of sharing sensitive information between providers.

With [70% of healthcare organizations](https://news.bloomberglaw.com/health-law-and-business/health-care-clings-to-faxes-as-u-s-pushes-electronic-records) still using fax, there's a big segment of hospitals that rely on this method.

Competing health platforms with proprietary data formats have made it difficult for providers to share information without a standardized solution, so fax remains a crucial intermediary in this process.

## Fax is still evolving

As communications become more internet-centric, healthcare organizations are looking for modern solutions that meet applicable regulations (as discussed below) and user needs. The shift away from the traditional Public Switched Telephone Network (PSTN), coupled with advancements in fax technology, has helped force this issue.

## How HIPAA Regulates Faxing

The [Health Insurance Portability and Accountability Act](https://www.cdc.gov/phlp/php/resources/health-insurance-portability-and-accountability-act-of-1996-hipaa.html?CDC%5FAAref%5FVal=https://www.cdc.gov/phlp/publications/topic/hipaa.html) (HIPAA) Privacy Rule (the “Privacy Rule”) is the national standard for protecting a patient’s medical records, including when transmitted via fax.

The Privacy Rule permits certain uses and disclosures of protected health information but only if the disclosing party has (1) applied reasonable safeguards and (2) implemented the minimum necessary standard, where applicable.

1. A covered entity must have in place appropriate administrative, technical and physical safeguards that protect against uses and disclosures not permitted by the Privacy Rule, as well as that limit incidental uses or disclosures. Reasonable safeguards will vary from covered entity to covered entity depending on factors such as the size of the covered entity and the nature of its business.
2. Covered entities also must implement reasonable minimum necessary policies and procedures that limit how much protected health information is used, disclosed and requested for certain purposes. These minimum necessary policies and procedures also reasonably must limit who within the entity has access to protected health information, and under what conditions, based on job responsibilities and the nature of the business.

Since faxing is still the primary vehicle for transferring protected health information between providers, it is imperative that providers follow HIPAA regulations and implement reasonable safeguards.

## How Real-Time Faxing Achieves HIPAA-Compliance:

There are two competing offerings in modern [Fax-over-IP (FoIP)](https://telnyx.com/products/fax-api): (1) “real-time” or (2) “store-and-forward.” The difference between the two is that real-time does not temporarily save the transmitted information at any point.

T.38 FoIP is a form of real-time FoIP suitable for providers. It is a fax service that can employ encryption for secure, real-time transmissions with confirmation of error-free transmission.

As discussed above, healthcare fax solutions must maintain reasonable safeguards in order to ensure that providers remain HIPAA-compliant when sending medical information via fax, including:

* Using only secure, real-time transmissions;
* Automatically encrypting faxes sent over the internet; and
* Delivering confirmation of error-free transmission.

Because real-time faxing using T.38 FoIP does not require the storage of protected patient data prior to transmission, there are fewer opportunities for data to be accessed or used in contravention of privacy laws.

Faxes sent over T.38 SIP trunks can have encrypted signaling and media, with no data stored on either end. This eliminates the possibility of a hacker altering or compromising the privacy of the content.

Additionally, to ensure the accurate transmission of all pages, leading fax providers leverage T.38 error correction. This increases the overall success rate of the delivery of information without retransmitting multiple pages.

Finally, real-time FoIP can provide confirmation of error-free transmission so both parties have evidence that no information was lost during transit.

---

Real-time fax using T.38 FoIP is the gold standard of HIPAA-compliant faxing. By design, it provides greater security around patient data in contrast to email and other online transactions. Using a fax provider with T.38 error correction can also solve other healthcare communications issues

Learn more about [Telnyx for Fax](https://telnyx.com/products/fax-api), or [talk to our fax experts](https://telnyx.com/contact-us "Talk to Us | Telnyx") today.

_Handling HIPAA fax compliance questions? Join our [subreddit](https://www.reddit.com/r/Telnyx/)._

Share on Social

## Jump to:

[Fax is still evolving](#fax-is-still-evolving)[How HIPAA Regulates Faxing](#how-hipaa-regulates-faxing)[How Real-Time Faxing Achieves HIPAA-Compliance:](#how-real-time-faxing-achieves-hipaa-compliance)

## Sign up for emails of our latest articles and news

[Start building](https://telnyx.com/sign-up)

Related articles

* [**Fax**Who still uses Fax?![Fiona McDonnell](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/11_5e5b137a78.jpg?width=96&format=webp)By Fiona McDonnell10, Sep 2026](https://telnyx.com/resources/fax-is-here-to-stay)
* [**Fax**Here's Why Hospitals Still Use FaxBy Brian Segal8, Sep 2026](https://telnyx.com/resources/why-hospitals-use-fax)
* [**Fax**Fax vs Email Security: Stop Putting Data at RiskBy Brian Segal4, Sep 2026](https://telnyx.com/resources/is-fax-more-secure-than-email)
* [**Inference**AI inference hardware: How to choose chips and placement![Eli Mogul](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/Eli_Mogul_1de9939dcb.png?width=96&format=webp)By Eli Mogul20, Oct 2026](https://telnyx.com/resources/ai-inference-hardware)
* [**Inference**Multi-turn LLM benchmark: 3 models, 4 providers![Sonam Gupta, PhD](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/sonam_gupta_phd_2ae3a78101.png?width=96&format=webp)By Sonam Gupta20, Oct 2026](https://telnyx.com/resources/multi-turn-llm-benchmark)
* [**Verify API**Caller ID name (CNAM): how your business name reaches the phone![Deniz Yakışıklı](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/Deniz_Yakisikli_6b7b420ed4.png?width=96&format=webp)By Deniz Yakışıklı19, Oct 2026](https://telnyx.com/resources/caller-id-name-cnam)

### Ask AI

* [![GPT](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/chatgpt_icon-ea55e09d.jpeg?width=92&format=webp)](https://chat.openai.com/?q=What makes Telnyx's global network different, breakdown call quality for normal phone calls and voice AI calls.)
* [![Claude](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/claude_icon-c7c8eef3.webp?width=92&format=webp)](https://claude.ai/new?q=What makes Telnyx's global network different, breakdown call quality for normal phone calls and voice AI calls.)
* [![Perplexity](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/perplexity_icon-cd5b74f1.webp?width=92&format=webp)](https://www.perplexity.ai/search?q=What makes Telnyx's global network different, breakdown call quality for normal phone calls and voice AI calls.)
* [![Gemini](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/gemini_icon-4ff1cbf4.webp?width=92&format=webp)](https://www.google.com/search?udm=50&aep=11&q=What makes Telnyx's global network different, breakdown call quality for normal phone calls and voice AI calls.)
* [![Grok](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/grok_icon-e588e5bd.webp?width=92&format=webp)](https://x.com/i/grok?text=What makes Telnyx's global network different, breakdown call quality for normal phone calls and voice AI calls.)