For anyone that is still green on company politics, all company principles are check boxes that form part of an HR circus of yearly compliance trainings, and marketing for young employees that are naive enough to think they mean anything.
Perhaps this reflects your experience, in your part of the world. In some parts of the world, principles and ethics do count, and don’t change on a dime (as they do in the US).
In my experience working at several US health IT companies, company principles for following HIPAA rules (especially patient privacy) were taken seriously at all levels and considered more than just compliance check boxes. Regardless of the ethical issues, if you get a reputation for being sloppy and the trade press writes negative articles then that can kill your sales pipeline.