The State of Illinois is going to lose its "business" already for other reasons. Do you think there is a reasonable privacy regime that prevents health systems from knowing where their patients live or using that information to site clinics?
What the health system should impose is a standard for interoperability. Not an internal network that presents a juicy target.