E-mail records need attention: Regulatory and compliance issues demand management of e-mail communications in oil and gas activity

摘要

In the post-Enron era, oil and gas companies are being forced to expand their definition of which documents and information require formal management and to put a greater focus on corporate accountability, compliance and ethical governance. For oil and gas companies that create, acquire or maintain health-related information for employees and retirees such as insurance claims or injury reports, compliance with Healthcare Insurance Portability and Accountability Act (HIPAA) requirements is necessary. HIPAA governs the privacy and security of medical records and other health-related information. Employers must proactively safeguard health-related information of employees and retirees by implementing policies and procedures related to information access and disclosure. In addition, organizations must provide training to ensure that employees are aware of the appropriate disclosure requirements and restrictions for HIPAA. Records documenting an organization's compliance with HIPAA regulations regarding the handling and disclosure of personal health information must be retained 6 years. Any of these records could be communicated via an instant message or attached to an e-mail message.