So much work is done for HIPAA compliance, and then the only authentication required is a birth date.