Health care organizations must shake off their HIPAA-induced paralysis and get technical.