Is email communication covered under HIPAA compliance