“Until these networks establish standards for, and open up to, data-sharing permitted by HIPAA but that isn’t [for] treatment, we will see entities trying to morph themselves into a treatment use case in order to get the records they need,” said Deven McGraw, a former high-ranking HHS health privacy official in the Obama and Trump administrations and now chief regulatory and privacy officer at Citizen Health.