Yes, that is possible, and some do that. In practice, HIPAA is pretty complicated and email is more of a dark gray area than a hard no. For that reason most pr

Yes, that is possible, and some do that. In practice, HIPAA is pretty complicated and email is more of a dark gray area than a hard no. For that reason most providers avoid it and prefer to use dedicated secure messaging systems that have things like consent and auditing built in.