Senator Ted Kennedy focused on the individual, contrasting the burden of the family bread-winner who must find a new job because his employer discovers something in his health information that the employer does not like, against the burden for healthcare organizations in complying with the regulations. A hundred years ago, record keeping about individuals was limited. A patient's medical record typically existed only in the doctor's memory. Privacy was not an issue. Now, people work for organizations that keep extensive records on them.
Insurance is the norm, and medical care is institutionalized.
Both require the individual to divulge information. Both usually keep some evaluation of him based on his and others' input, and both are increasingly automated to ease information access. Some security measures have been implemented, but they are typically inconsistent and inadequate. This control or power has moved to the organization. And organizations have strong profit incentives to acquire and use protected health information.