I'm not quite sure yahoo messenger, windows messenger etc would make the grade of complying with HIPAA.

However this does point to the need for some kind of an INTERNAL MESSAGING system.