yep, it's sad that they had to make another "common sense" law. you would have thought people wouldve known this prior to 1996.
There's a new one coming down the pipe for next year that is like the HIPAA on steroids law. I can't remember the name of it right now, but I'm already having to go through all my data systems to make sure we are compliant. And you are right about people should know.
Little HIPAA fact for you. Legally, because of HIPAA, I cannot look at my own medical records while I'm at work (caveat being that I work at the same healthcare system that I get my healthcare from). I have to fill out all of the same paperwork as if I wanted someone else to look at them, but specify myself as a permitted party. How smart is that?