Create a protocol or API spec on top of HTTPS or something else and use it. I don't know where you ar at but surely the government can just say "hey guys support this secure protocol before 2022 or you're out".

I can log on and read any of my medical records at any time and the information is aggregated from multiple sources. What's the issue?

If you use fax you won't even be able to see some kind of central audit log for your data. That's pretty crazy.