I wasn't suggesting that we should, but in my lifetime we went from hospital admissions and discharges being published in the local paper, to that information being some of the most closely guarded with (theoretically) severe penalties for disclosure.

I think it was AIDS and people not wanting to be outed that changed things.

But whatever the reason, we now have HIPAA and it adds a huge amount of complexity to the management of medical records, and a huge amount of complexity to any research that needs access to a broad spectrum of medical case histories (such as training AI). Other countries don't have these concerns, and will outcompete the US on developing these capabilities.