I'm fuzzy on HIPAA regulations. I know sending files over email is illegal, but what if the files are zipped with a password. Is emailing records legal if they are zipped with a password?