[twobat]

GDPR should kick in long before medical data is on the table.

[dragonwriter]

GDPR will only occasionally and coincidentally (if at all) be relevant to health data held by US health care providers and their business associates, whereas HIPAA will always be relevant.

[buboard]

laws protecting medical data are stricter and preceded gdpr by many years