This makes me wonder, how much lawyering is involved in the development of these tools?
At a previous healthcare startup our founder asked us to build some really dodgy stuff with healthcare data. He assured us that it "cleared legal", but from everything I could tell it was in direct violation of the local healthcare info privacy acts.
I chose to find a new job at the time.