"[W]hat we have today is a set of privacy and security rules that work really well where they apply -- but that don't apply at all in an increasing range of situations where health information is collected, created and analyzed, including wearables, mobile applications, community and patient support groups, personal health records and a broad array of 'consumer directed' health care activities."  MORE >>