De-anonymzed (health) data likely isn't covered by HIPAA, and with a few still generic data points likely associated with the health data, such as health, gende

De-anonymzed (health) data likely isn't covered by HIPAA, and with a few still generic data points likely associated with the health data, such as health, gender, age, and location -- you could work backwards to reach an identity. There's likely a loophole for whole security of health data thing.