This is because fax is still considered by HIPAA to be a secure method of transferring patient information. Where email is unencrypted and this considered to be insecure.