There are a few potential avenues for a HIPPA violation, as I see it. If we have a husband and wife who happened to give us the same email address they will both be mailed login information. Potentially every portal message thereafter may be a privacy violation. If I have a 15 yo with a parent's email address on their chart, and they eventually age into 18 yo, the parents will still have access and this may be a violation. Just something to be aware of.