HIPAA would prevent a doctor from telling a drug company which patients might want its products, but not from recommending drugs to patients according to their

HIPAA would prevent a doctor from telling a drug company which patients might want its products, but not from recommending drugs to patients according to their symptoms. Facebook's ad-targeting business model is entirely consistent with a HIPAA-style regulation. The data are not for sale; the eyeballs are.