Email sent from a Creighton account to a non-Creighton email address are automatically scanned for potentially HIPAA-sensitive content and encrypted (with a link to a secure web portal) if sensitive content is found. However, the sender can manually specify whether a message is to be encrypted by including a special command on the Subject line of the email message.
More Resources:
https://doit.creighton.edu/security-passwords/secure-email