HIPAA laws (which protect the privacy of patient health information) have some real teeth. If Facebook was not scared off by them, their partners -- the hospitals -- may well have been.