HIPAA is not a big deal, and even more entertainingly, mostly only covers identifying information:
http://www.hipaa.com/2009/09/hipaa-protected-health-informat...