It's not really a loophole, it's kind of the whole point of the law. It's purpose was to establish standard, regulated methods for sharing health data between

It's not really a loophole, it's kind of the whole point of the law. It's purpose was to establish standard, regulated methods for sharing health data between organizations. And using it to serve you ads would be a clear violation of the law.