Thank you for your question and for contacting Just Answer. The short answer to your first question is it could. If the form is not secure, and there is a breach, meaning that the information was disclosed to unauthorized parties, or unauthorized parties hacked the system and obtain that information. Having said that, if the proper precautions are in place, HIPPA policy
encourages the use of Web applications for doctor-patient communication and patient access to the patient's own medical records. In fact, as of 2003 HIPPA made patient access to medical records mandatory. As such, a physician using a web application in order to make patient information available to the patient would be in compliance with that policy.
In researching the answer to your questions, I came across the following website which you might find helpful. Here is the URL:http://www.hipaaguide.net/hipaa_privacy_rules.php
As well as:http://www.hipaaguide.net/hipaa_security_rules.php
Now to respond to the second half your question, what makes it a risky situation for the physician is if he has not chosen a professional and vigilant developer to design and host the medical practice web application. Emphasis has to be on security and reliability if the physician is going to provide access to patient medical information over the Internet. You may find the following link to contain useful information and additional resources:
I hope that you have found this information helpful. If there is something that I have not explained clearly, or, if you are dissatisfied with the answer, please don't hesitate to ask a follow-up question. Also, please remember to click on the green "accept" button so that I may receive credit for this answer as well as any comments or feedback you may have. Your question will not close, and you will still have the opportunity to follow-up if needed. I wish you the best of luck in pursuing your case.
This is information only, not legal advice. No attorney-client relationship has been created. Please consult an attorney in your state for legal advice regarding your matter.