The issue you raise is the opposite of what the day to day concerns are. Clinical systems, in general, are much too permissive and allow too much access to too

The issue you raise is the opposite of what the day to day concerns are. Clinical systems, in general, are much too permissive and allow too much access to too many people. There's absolutely nothing in HIPAA that prevents coordination of care or cross functional team communication. HIPAA is actually a very well written law, and very reasonable. It says things like, you can't use an EHR to mine patient data for marketing purposes. You have to take privacy seriously and build safeguards. You have to document that you did that. You have to do risk analysis, and document breaches, and follow notification protocols. I'm a former HITRUST auditor, and CTO of healthcare company. I've been deeply involved with this law for many years, and to date, I haven't found any part of it that I disagree with.