Hipaa

Is it ok to send medical records to an attorney under a NON-Secure website/email? I think this would be a HIPPA violation even if the patient signs a paper stating there medical records can be sent out.. Am I correct. Please help. Thank you

Hipaa