My point is that HIPAA has absurdly high compliance costs. It's like buying an apple for a million dollars. The problem isn't that apples are bad, but we sure shouldn't buy any more for that price.
Isn't the cost an implementation detail? The laws do not requiere things to be expensive and there might be a need for more regulations to fix the costs with better defined standards,software,procedures etc.