Standard Internet e-mail provides no security for PHI. Many facilities would choose not to allow transmission of PHI via e-mail at all.
Some facilities may allow transmission of PHI via secure encrypted e-mail, or as password protected e-mail attachments.
You must of course comply with your facilities' policies and procedures regarding any use or disclosure of e-mail for PHI.