And yet seems to have violated them (I've cited the specific section of regs elsewhere in the thread). But deidentification is one of those things people who don't freak with it often, even trained in the rules, always seem to think is easier than it is.

I never said the doctor violated a law. I think what the doctor said (in speaking about a specific patient): "The doctor said one corrected report is for a patient she sent to the emergency room after receiving abnormally elevated test results from Theranos in late 2014." was ethically dubious.

Most of the people who are replying negatively to my comments are misinterpreting my position: either suggesting that I implied there was a HIPAA violation, or that I think medical research data should be suppressed. Neither of those is true.