You're not important enough. HIPAA rules, which are incredibly vague (I've had to implement HIPAA-compliant systems, and the guidance is non-existent), are in p

You're not important enough. HIPAA rules, which are incredibly vague (I've had to implement HIPAA-compliant systems, and the guidance is non-existent), are in place to protect the rich and powerful, not ordinary people. The fines are exorbitant, and are targeted to individuals, not institutions (i.e., the hospital doesn't pay the fine, the nurse who accidentally lefty a folder lying around does). Personally I think HIPAA is a cruel joke and we would be better to do away with it, in favor of writing or enforcing laws against abusive behavior. I.e., it should not be a problem if people know your medical history if there are laws protecting you from, say, insurance discrimination, or personal prejudice by your medical practitioner. Such a law, however, might require protecting ordinary people.