The secure transfer of data files between secure environments (202, 211) is disclosed. At a source environment (202) a user issues a request via a first local terminal (205J) to transmit one or more selected data files (101) to a specified recipient (211) by identifying the data files and the recipient's email address. The transmission of the data file is approved, possibly by a supervisor (208) and a copy of the selected data file is made to an encrypted storage device. An email is issued to the recipient (211) identifying the location of the selected file and a first password. The selected data file is transferred to the recipient in response to the recipient identifying the location and providing the first password. Preferably, a second one-time password is provided via an alternative mode of communication.