My take on it is HIPAA is meant to protect your privacy which is great BUT we have to make sure it doesn't impede progress in mental health. I am no expert but there has to be incredible amount of information based on studying the data. This is especially true in mental health.
Personally, I am not a fan of a general statement like "don't collect any data". As a patient, I am totally ok if a system collects data ON me BUT never ABOUT me. In another words, the data should in no way be identifiable. That way, we continue to make progress while maintaining privacy.