What specific components do you think are problematic?

I've worked as a developer with health care providers and insurance companies for 5 years, and other than it being annoying as "some regulation exists" no one I've talked to feels it's a bad solution to the problem.

Asking industries to be happy about privacy regulation seems an unreasonable goalpost.