Bert, you could email the patient instead if they want it electronically w/o having to get a CD. HIPAA does not prohibit email. See
https://www.hhs.gov/hipaa/for-profe...sonable%20safeguards%20when%20doing%20soSometimes we will send records via regular email if the patient is an inactive patient (so portal will not work) or an adult patient who just needs the meningococcal vaccine record for college. I get them to sign a form that basically says it's ok for us to send an email w/o that password protection and warns of possible breaches, etc.