Setting up online fax safely
| Step | Why it matters | Who does it |
|---|---|---|
| Sign the business associate agreement | Required before the provider handles patient data | Practice and provider |
| Give each person their own login with MFA | Shared logins defeat the audit trail | Practice, with your IT provider |
| Route numbers to the right inbox | Referrals and records requests reach the right staff | We set it up with you |
| Save frequent numbers | Fewer misdirected faxes, as HHS suggests | Practice |
| Set retention | Matches your records policy | Practice |
Why now
Fax machines usually sit on copper phone lines, and copper is being retired. In January 2026, the FCC approved AT&T’s application to discontinue copper-based service at wire centers in 18 states, including Missouri and Kansas, starting as early as November 2026. Moving fax numbers to an online service now avoids a scramble later and puts every fax behind a login.
Part of a bigger HIPAA picture
Online fax is one piece of protecting patient information. The rest, a risk analysis, access controls, encryption, backups and a security partner that will sign a business associate agreement, is covered in our HIPAA cybersecurity guide. For alarm and elevator lines on the same copper, see POTS line replacement.
