From FierceHealthcare:
Although HIPAA initially required the creation of a health identifier in 1998, Congress overruled the legislation, barring federal agencies from investigating or creating patient identifiers out of privacy concerns.The American Health Information Management Association (AHIMA) voiced its support for efforts in Congress to repeal an “archaic ban that has stifled innovation and industry progress for nearly two decades.”
Source: House votes to lift ban on federal funding for unique patient identifier | FierceHealthcare
Hmmm. I wish I trusted them more.