I don't think provisions like HIPAA alone cannot prevent abuse of medical data, Say a free medical-consultation app along with health tracker from a health insu

I don't think provisions like HIPAA alone cannot prevent abuse of medical data, Say a free medical-consultation app along with health tracker from a health insurance provider can provide data to the health insurer which can further be used in a flawed algorithm to increase premium or worse cancel the policy when it's most needed. Conflict of interest regulations should be applied for data, If my data can be used to cause harm to me then you shouldn't have it that's all.