I recently asked for a copy of my medical records to be sent to me from my provider. He sent them without a "signature required". They were left unattended on my porch. My understanding is that "Providers must also make sure that they send your records to you in a secure manner." I am pursuing a civil matter with this person and failure to provide adequate security for my records was, IMHO, intentional.