My spidey sense in law has to ask myself, "I wonder if that's HIPAA compliant" lol. Should just call it the Dark HIPAA requirements and un-UX in Health Insurance.

Laughing aside, the real data pinch in HI is the meta data of the meta data. Once you understand the abstracted layer there, the rest is following EDI compliance contracts and creating views appropriate to the end user.

It's a slippery slope.