As health data liquidity rapidly increases, collection of health and “health-ish” data has dramatically outpaced existing regulatory safeguards. There are a wide variety of new vehicles for patient-directed electronic data exchange from health care providers or health plans to entities not covered by HIPAA, in addition to a sharp rise in consumer- and patient-generated data – including from wearable and remote-monitoring devices and on-demand genetic testing services. This is leading to the ever-growing collection of identifiable and individually attributable data, as well as its mining for a diverse assortment of purposes.