A day or two ago, an HN thread had the founder of a company that worked with medical information, explain that HIPAA is actually a bit of a “paper tiger.”

It applies in very specific situations, and it can be surprising where it can be circumvented.