Excerpt: [T]he most important change ... is the elimination of the need for a written patient consent to allow providers to use protected health information (PHI) for treatment, payment and health care operations. This consent was purely symbolic, because HIPAA would have prevented anyone who refused to give it from obtaining treatment. The requirement would also have resulted in a great deal of regulatory complexity, and threatened to impede access to health care.