There is no real trade off between medical privacy and research. That's a total red herring. Researchers can already ask patients for consent to use their data. Many patients will agree, especially if researchers explain the potential benefits and take responsible steps to safeguard the data.

HIPAA regulations also allow researchers to use de-identified data.

https://www.hhs.gov/hipaa/for-professionals/privacy/special-...