This is my point exactly. If you need to access health records you don't need to simultaneously access Facebook or Twitter. All resources should be approved, IE

This is my point exactly. If you need to access health records you don't need to simultaneously access Facebook or Twitter. All resources should be approved, IE have a legitimate business purpose. This can be done easily in any enterprise firewall, simply implement a white list of acceptable sites and block everything else no DPI required.