HIPAA requires an secure email, which my understanding is what Updox has.
That said, I do not know whether AC automatically will set up an account through Updox (I do not currently use it.)
Updox has a free secure messaging system(
https://www.myupdox.com/get/).
My guess is since this is a MU2 requirement, AC got them to allow automatic inclusion in the new version. Probably a good recruitment tool: "See how good we do this, for only $x.xx you can have all that!"
After reviewing the information, I actually signed up for the free portal (I had been intending to do that but never did...) This went smoothly. Now as to using it.....