What boggles my mind is the notion that a potential HIPAA violation is some grand immorality. It's just information about somebody. It's nice to keep secret, but no great loss to society if it was made public.
What if you could opt in to healthcare that was 20% cheaper, but was only subject to contractual promises of medical privacy, not the HIPAA. Would you take the deal?