Sadly, "business and medical purposes" covers a great deal, and in the day-to-day that is where the impact really is felt, not from some mustachioed government

Sadly, "business and medical purposes" covers a great deal, and in the day-to-day that is where the impact really is felt, not from some mustachioed government thug (much as I'd like to claim otherwise). The best reform we could probably see is to say that your health and medical data belongs to you, full stop, and consider it a work-for-hire. Then, a national regulation on how to represent that data (normalizing what is pulled in) and interoperability specs, as well as a public option for warehousing your data if you choose not to go free-market. There are a lot of issues even with the simple data-representation part...terminology and whatnot, for example--and getting that straightened out is exactly the sort of boring work that, in the long-run, yields extravagant dividends.