HIPAA creates huge amounts of friction in delivering medical services without actually improving security much
The other stuff, yeah I guess that could hypothetically happen, but how much of a problem was it really and is the cost of HIPAA worth it?
HIPAA, as I have read, was mostly about health insurance portabilty and eliminating things like losing coverage for pre-existing conditions when you changed jobs and insurance. All the privacy regulations were added by the Department of Health and Human Services after the law was passed.