Driving innovation and email security with smart technology

Royal Papworth Hospital NHS Foundation Trust

The Challenge

  • Sending large files was a constant challenge for the team - including fulfilling SARs, engaging with patients, and sharing records with external agencies
  • Enabling patients to communicate with the team was also problematic, with no secure way for stakeholders to send data into Royal Papworth from outside of the organization
  • Patient experience needed to be streamlined and accessible - requiring patients to create accounts was out of the question

The Solution

  • Integrating seamlessly with Outlook, Zivver enables the team to send large files (up to 5TB) by email, effortlessly, with advanced encryption and two factor authentication
  • Zivver Conversation Starter enables external parties (including patients) to email Royal Papworth securely via a secure link, or in response to an email, including the ability to share large files
  • Accessing secure emails sent by Zivver is easy for patients and other stakeholders, with no requirement to create accounts

Royal Papworth Hospital NHS Foundation Trust is the UK’s leading heart and lung hospital, treating approximately 50,000 patients each year. The Trust is currently rated 'outstanding' by the Care Quality Commission (CQC) from an inspection carried out in 2019. 

Data protection is a priority for the organization. As traditional paper and postage is increasingly phased out in favor of electronic patient engagement, the Trust selected Zivver to reduce human error and protect sensitive data in outbound and incoming emails. 

We spoke with Head of Information Governance & Health Records at the Trust, Cath Willcox, to understand how Zivver is supporting them.

“We’re rolling Zivver out for every one of our 2,500 members of staff. While not every employee will use Zivver day to day, we’re implementing it for everyone. Currently there are around 60 people using the solution. While we’re still in the early stages of the roll out, we’re seeing some great benefits already. The business rule functionality is very helpful, and we’re investigating new opportunities to create more to empower all employees to avoid causing data leaks through simple mistakes.”

Sending large files from Outlook 

“Zivver integrates with Outlook and enables us to send large files straight from the email client. This comes in useful for many of our employees. For example, our Subject Access Request Team fulfills requests of all sizes; they can vary between 50 and literally thousands of documents. Historically, we have posted these, which is both time-consuming and very costly. We have also used a bespoke file transfer site but this has proven less than user-friendly for recipients. Zivver saves time, ensures best practice on a data protection front, and is easy for patients.”

“The ability to send large files securely by email is helpful in dealing with other stakeholders, too. For example, on occasion we have cause to engage with solicitors who may be handling cases on behalf of patients. Often, these firms have firewalls in place which prevent them from accepting files sent via third party sites - but they do accept secure emails and attachments sent via Zivver.”

Two way secure emailing with patients

“One of the main things that attracted me to Zivver was the fact that it enables two way secure email. This means that not only can our employees email securely, but non-Zivver users outside of the trust, including patients, can email our staff securely, too. Zivver makes this really easy. Recipients don't need to create Zivver accounts or log in to any portals. It’s as easy as replying to an email! Previously, this hasn’t been possible but this functionality is beneficial for so many reasons.”

“For example, our Private Patient Team will often send a patient a form to complete. Previously, while they were able to send the form securely to the patient, the patient was unable to return the form to us with the same levels of security applied. This meant that we were sending an email which contained little to no sensitive data securely, but the patient was returning it to us, complete with personally identifiable information, unencrypted. But with Zivver, patients can reply to our emails very easily and their data is protected.”

“Our overseas Administrator manages referrals of new patients. In the instance that we require confirmation that they can be treated at the Trust, our administrator sends a request to the patient for proof of residency or identification, for example. Understandably, the patient may not want to supply us with original documents, and not everyone has access to a scanner or printer. However, most people have access to a mobile phone with a camera and are more willing to correspond with us via email than post. So, we will send the patient a secure email and ask them to reply to it with their documentation attached. Their data is secure and the process is quick and easy for the patient.”

Protecting data in research and development

“Our Research and Development team is currently facilitating a study which involves approximately eight other hospitals. The project requires our team to collect and collate data from these hospitals every few weeks before passing it on to the sponsor.”

“Originally, the plan was to provide the hospitals with USB sticks. The hospital would transfer the required data onto the USB sticks before posting the stick to us. We would then download the data and return the USB stick to them in the post. The cost of couriers alone was impractical, not to mention potential data loss in the instance that a stick was lost.” 

“With Zivver, we can simply email each hospital and ask them to reply to the email with their data. In this instance, the amount of data provided is quite small, so they can simply input it into the body of the email. Of course, if the amount of data provided was bigger, they’d still be able to send us large files securely via Zivver, without having to create accounts. What was originally going to be a very time-consuming process is now straightforward and far more secure.”

“We also utilize Zivver’s multi-factor authentication controls, using phone numbers to ensure only the right people can access sensitive emails. In addition, users are also using the expiration controls to control access to files after sending. Employees find this functionality particularly useful.”

Flexible and simple multi factor authentication

“Another instance in which Zivver is proving very helpful is when dealing with insurance providers. We engage with a provider for the US Armed Forces. When we deliver healthcare to one of their customers, they contact us requesting data regarding their case. Zivver protects this data in transit and of course enables the provider to contact us securely, too.”

“This is also an example of how the multifactor authentication (MFA) functionality in Zivver is particularly helpful. We can apply MFA to authenticate the identity of patients and they can choose the method of authentication they would prefer to use. Patients will often opt for a code sent via SMS. However, for those who don’t have access to a mobile phone, they can choose to receive a password by email. And once we’ve engaged with an individual once, their authentication method is stored for next time; we don’t need to keep setting it for every email.”

“In a world where paper and postage is quickly being replaced by digital engagement, we must be able to facilitate this whilst ensuring accessibility for all patients. Zivver provides a truly simple user-friendly experience and that is very important for us.”

5-star rating

"Zivver saves time, ensures best practice on a data protection front, and is easy for patients."

Royal Papworth Hospital NHS Foundation Trust logo

Cath Willcox
Royal Papworth Hospital NHS Foundation Trust

Share this

Share this insight

Ready to learn more?

Learn how Zivver can help you with secure email and effortless compliance

CTA Graphic