The De-Identification Dividend: How HIPAA's Safe Harbor Became a Commercial Gateway for Health Data
HIPAA's de-identification safe harbor was designed to enable research while protecting patients, but it has also created a commercial pathway for health systems, insurers, and data brokers to monetize patient information with limited public accountability. This legal-policy analysis assesses re-identification risk, fragmented oversight, and the case for purpose-limitation rules in 2026.