The HIPAA seems to prove that although flawed the threat of fines provides an incentive for most entities handling it to take it seriously. Twenty years ago your Health data was not protected and was accessible unanonymized to any grad student who wanted to run a study, or any Hollywood reporter who wanted a scoop on why actor Y or actress Z were hospitalized.
