I've always thought this about HIPPA as well, having worked in the healthcare field years ago. I imagine some "hero" leaking an enormous healthcare dataset after anonymizing some info and furthering research. Too bad I never had access to that.
There is nothing legally stopping healthcare organizations from asking patients for informed consent to share their anonymized data with researchers. The government even provides clear guidelines for de-identification.