HIPAA does not forbid email from providers to patients. It does establish regulations pertaining to all electronic communications, including email. The AMA (and other provider organizations) has established its own guidelines for using email. A lot of services have sprung up to offer the required security necessary for transmission of emails to patients. I do know some physicians who choose to not email because they feel it is easier to comply that way.