Doesn’t it affect citizens and the economy? Saying that you have to be minimally competent to handle medical data seems pretty similar to saying that you have to follow basic hygiene rules to run a hotdog cart. We have centuries of experience showing that things like this aren’t effectively controlled by individual lawsuits, both because they’re expensive to fight and because people are very creative at coming up with ways to shelter the proceeds.