"Many experts say HIPAA is outdated, because its narrow definition of data collection does not cover the way tech companies collect and process health information," reports in