Email compliance is something I've wondered about with the HIPAA guidelines. I do some work for a few health care clients and had to sign forms for HIPPA saying that I wouldn't discuss patients in any way. If I walk through the dining room and note what residents are eating, I cannot tell you that. So how do these strict rules governing patient confidentiality pan out with today's technology? The agencies I deal with simply do not send private information via email and therefore are guaranteed safe.
Borderware offers products to ensure internet security such as content filtering, attachment scanning, and encryption, to name a few.