They should be able to ask for that in a secure manner with security and retention controls and guardrails for how that data is accessed. In other words, email is not ideal.

Or, if your time and money allows it, deny that option and take your kid into the doctor in person.