You’re daft if you think its something anyone cares about after 20 years of implementation.
The reason it’s taken 20 years to implement (and actually, it still hasn’t technically been implemented, since we’re still in the initial enforcement stage) is because people cared and still do.
Here’s a script you can send to your state legislators and governor:
I demand a state medical privacy law at least as strong as the Minnesota Health Records Act (Minnesota Statutes 144.291-.298). Here are seven types of disclosures that HIPAA permits without patient consent or knowledge, but which generally require patient consent in Minnesota:
Source: Mayo Clinic’s Notice of Privacy Practices (link: https://www.primarycareondemand.mayoclinic.org/notice-privacy-practices)
Minnesota is the only state to have a comprehensive medical privacy law stronger than HIPAA. [State] should be the second.