I am constantly harping that the biggest damage from medical record privacy is not the loss of actual medical information, but the risk that other information (especially social security numbers or other account or financial information) will be used for ID theft...