Patient portals can have important benefits to both patients and providers, but they certainly carry risks to privacy and security that you must be aware of and protect against. Include patient portals in your risk analysis, and it should not be difficult to do so in a HIPAA-compliant manner..