HIPAA was enacted in 1996 to protect the privacy of patient health information. In practice, HIPAA’s stringent requirements may harm patients, create a chilling effect on medical researchers and healthcare providers, and significantly increase medical costs.