Good article except for one error: Email IS allowed per HIPAA guidelines. See the Health and Human Services website at http://www.hhs.gov/ocr/privacy/hipaa/faq/health_information_technology/570.html