IANAL, but I don't think HIPAA applies. As I understand it, HIPAA only applies to doctor/patient interactions, not situations where the "patient"[1] is looking for data independently.
[1] patient is probably the wrong term here, without a doctor/nurse directly involved
My health system in Oregon is offering online consultation with medical professionals. I haven't used it yet but it seems more than email and it seems person to person, not person to medical journal article.
[1] patient is probably the wrong term here, without a doctor/nurse directly involved