As I understand it, HIPAA requires that health information is secured in transit and at rest. This is difficult to do over email, since email is not always encr

As I understand it, HIPAA requires that health information is secured in transit and at rest. This is difficult to do over email, since email is not always encrypted in transit, so the general recommendation is to use a portal instead. There's some additional information here: https://www.securitymetrics.com/static/resources/orange/HIPAA_Compliant_Emails_White_Paper.pdf https://www.securitymetrics.com/static/resources/orange/HIPA...