In my experience (I spend a lot of time collecting medical records if you didn't read my earlier post) the only thing HIPAA does effectively is kill trees. The law is only as good as the people who handle your medical records.