[mrcarruthers]

The email thing is probably a privacy requirement. Email isn't encrypted meaning your email provider (and the EMR's) can fully read the contents of said email.

[8organicbits]

I think people want to waive that privacy concern. My email provider has access to tons of my private data including lots of health data. Given the option, I suspect many would prefer to just get an email.

[kQq9oHeAz6wLLS]

In the US, that's a HIPAA violation, which opens the provider up to massive fines.

[D13Fd]

Yes but it should be the consumer’s right to simply say they don’t care about the risks, and prefer the convenience.