The Business Associate Agreement required by HIPAA is covered as part of the Online Services Agreement with Microsoft.
Encrypting outbound email messages can be accomplished by using the "Encrypt" button at the top of the new message window, as show in the screenshot below:
