Question : Secure Email for HIPAA compliance

Looking for some alternatives to Exchange for secure email that would meet HIPAA compliance rules.  Can POP or IMAP email be secured to comply?  Low Cost or no cost alternatives would be preferred.  Am aware of Google Apps.  What else is out there?

Answer : Secure Email for HIPAA compliance

No you do not need a CAL for this.
Is the mailbox that you are sending as still a member of a protected group in AD?
If yes, send as permissions will be reset at random intervals and cannot be changed as long as the user is a member of the protected group.