I agree in some sense that things with data haven't really changed, but the reality is that there is a lot of data that has never been private. It's been seen as a) public domain or b) owned by the doctor, not the patient.
We do need rules, and we need to debate and think about the framework. For everyone that worries or doesn't like the doctor knowing where their hospital is, there are plenty of others that want the doctor to know for convenience. They just don't want anyone who shouldn't know to know.
It's a complex and thorny issue, which is made worse by the ease of access, not in a dusty file room in a county office, but from the comfort of your office in another country.