> Under HIPAA requirements emailing personal medical info is a massive no-no.

Doesn’t that only apply to covered entities, which the internet is telling me does not include the Social Security Administration.