【How-to】What is mrn - Howto.org

Electronic communications, including email, are permitted, although HIPAA-covered entities must apply reasonable safeguards when transmitting ePHI to ensure the confidentiality and integrity of data. … Sending an email containing PHI to an incorrect recipient would be an unauthorized disclosure and a violation of HIPAA.