July 28, 2014 | HIPAA was enacted in 1996, and it is causing some real challenges for health care groups as we move toward a more data-sharing, big data environment. Some are calling for a Congressional review of the act, but others think some questions should just be addressed. For instance, is an ACO considered a single "entity", even if it includes lots of groups? Where does tele-health--for example, Skype consultations--fall into privacy requirements? What about consumer devices? Apparently, legislation is being drafted that may help answer some of these questions. The Morning Consult