Most people think HIPAA protects their medical privacy. It doesn't. It governs how your health data gets shared, not whether it does. Once collected, your information moves through systems you'll never see, for purposes you never approved.