In keeping with its efforts to protect client data, BAS’ email system will not accept an unencrypted email that contains a formatted social security number in either the email’s subject, body or attachments.
Unencrypted emails sent by administrators or employees to email addresses @ BASusa.com, myenroll.com, or cobracontrol.com (including client-vanity email addresses provided by BAS e.g., clientname@BASusa.com) that contain a formatted social security number will be blocked. A message will be returned to the sender indicating that BAS cannot accept the email.
This security process of blocking unencrypted emails that contain formatted social security numbers and providing a delivery denial message to senders is intended to reinforce the importance of not using unsecured email for PII and PHI. This process also limits BAS's responsibility for retaining sensitive unsecured information.