I just posted a tongue-in-cheek blog post about HIPAA/Cures Act Information Blocking techniques found in the wild.

These are real barriers faced by patient-access API developers like Fasten Health, effectively blocking patients' access to their own medical records