I think at lest we should be notified whenever a breach of are medical records happens and in the notifacation it should included where, when and by whoever.
One major concern is that individuals cannot opt out of having their medical records in the database. This really should be addressed. I don't want why records in the database.