Bureacucratic Catch-22

I'm no fan of HIPAA, the law which tries to protect the privacy of patients.  Here's an example.--applying the law literally can prevent a person from accessing her own data, when someone else has stolen an identity.