I wonder would the effect would be of extending HIPAA protections to information that you have inferred. If you have inferred something about a person that is protected by privacy laws, should that inference itself also be protected? How much of a shield should "we're not 100% sure, so it's just a very well-informed guess" be?

I have my own story about advertisers inferring personal. Relationship status isn't protected, but the last time I went through a breakup, I was suddenly inundated with dating site ads. I don't feel like my shopping or web browsing habits changed, but they must have to figure it out.