HIPAA in its current form fails to adequately protect patient data. There is a lack of oversight, guidance and enforcement.