- New England's Only Dental-Specific IT Provider
- (207) 333-2206
Can a Dental Office Email X-Rays to a Patient?
-
Ezra Angelo
- • October 14, 2026
HIPAA does not automatically prohibit emailing dental X-rays to patients.
Patients generally have a right to access X-rays and other diagnostic images in the form and format they request when the dental practice can readily produce them that way.
The right process starts with verifying the requester, understanding the requested delivery method, and applying the appropriate safeguards, especially when a patient asks for unencrypted email.
When the requested email delivery is readily producible, the practice generally must honor the access request. If the patient specifically requests unencrypted email, briefly warn them of the transmission risks and confirm that they still want that method. Verify the destination and use reasonable safeguards.
First determine why the dental images are being shared.
The rules and safeguards depend partly on whether the patient is exercising their right of access or a provider is exchanging information for treatment.
A patient requests their own X-rays
Verify the requester and records, then provide the requested form and format when readily producible. Consider the patient’s delivery preference, including email, and follow the applicable access requirements.
A dentist shares images with another provider
Confirm the treatment purpose and intended recipient. Use the practice’s authorized clinical-sharing workflow and reasonable safeguards for transmitting patient information.
Do not automatically treat a patient’s access request as an ordinary provider-to-provider disclosure. Classifying the request helps staff follow the correct procedure.
Four steps for handling an unencrypted email request.
A clear process helps the practice honor the patient’s request while reducing avoidable mistakes.
Verify identity
Confirm the request is from the patient or someone authorized to act for them.
Explain the risk
Briefly warn that unencrypted email could be intercepted or read by someone else during transmission.
Confirm the choice
Make sure the patient still wants their X-rays sent by unencrypted email after the warning.
Verify and send
Check the email address carefully, use reasonable safeguards, and document the request and delivery.
Offer secure alternatives where available, but do not automatically require a portal instead of a valid patient-requested email method that the practice can readily provide.
The format, file size, and patient’s request determine the next step.
Dental images range from small radiographs to large CBCT exports. The delivery workflow needs to accommodate both the patient and the actual file.
Email attachment
May work for smaller files when the requested format is supported. Check attachment limits and follow the appropriate email safeguards.
Secure patient portal
Useful for controlled downloads when the portal supports the images and is acceptable for the patient’s request.
Secure transfer link
Can support larger file packages when provided through an approved system with appropriate vendor and access controls.
Agreed alternative format
If email cannot accommodate a large image file, discuss an accessible alternative such as suitable electronic media.
An attachment-size limit does not cancel the patient’s right to their X-rays. Work with the patient to agree on a suitable alternative when the requested delivery method is not technically feasible.
Can this X-ray file fit in an email?
Move the sliders to compare a sample imaging file against a practice’s example attachment limit. The suggested delivery approach changes with the size.
This tests file-size practicality, not whether a particular delivery method is legally permitted.
Attachment size may fit
The file is within the example attachment cap. Confirm actual mail limits, message overhead, permitted delivery method, and safeguards before sending.
If a patient specifically requests unencrypted email, provide the required risk warning and confirm their preference. File-size limits can require agreeing on a workable alternative, but do not remove the underlying access right.
Educational estimates only. Attachment limits differ by provider, and encoding can increase message size. No real patient files are uploaded or processed.
Frequently Asked Questions
Ekim IT Solutions works exclusively with dental practices, supporting offices across all 50 states remotely. We set up a secure, documented way to deliver X-rays and records that honors patient access rights while keeping reasonable safeguards in place.
-
- • October 14, 2026
