I'm wondering if HIPPA might be overly costly and counter productive. While I agree with the critical infrastructure designation for healthcare and associated cyber security initiatives, I don't think that there's any real value to my health information being private. Getting basic health care requires you to allow multitudes of third parties access to your health care information anyways, so is HIPPA's purpose actually being achieved? It's not like a hacker is going to get access to my bank account if they know I have high blood pressure. Just about everybody has some kind of condition. I think there are misplaced concerns about health insurance misusing the info to discriminate against people based on certain conditions, but I'm pretty sure there's already ways for them to do this now, and if we really want that to not happen, then just make a law to address that concern instead of HIPPA.