MDs must use email encryption, by (HIPAA) law