I apologize Wayne. I guess I will just say I'm not quite sure what you are trying to do. Don't know if I could help anyway. If all it were was for them to download it and mail it back, I don't think HIPAA applies since they initiated it.
I know, for instance, that if I email a patient and say, hey, little Johnie's physical went great, that is a violation of HIPAA. However, if I go through the rigamarole of emailing them and asking them to email me back to allow me to share PHI with them, then I can email them about syphilis and all sorts of things.
It still would seem you would want some type of portal where they they fill out an electronic form and it is then sent to you. With some type of button they click to send it that says, "By clicking this button and sending this form you are attesting you are the one who filled out this document, blah, blah, blah.
But, again, sorry if I misunderstood. Which I probably did.
