Not true. The regulations, even as revised, enact stringent privacy protections. What the revisions do is drop the original requirement to get written consent to a doctor's privacy policy before the doctor can give a patient treatment. The regs still require the doctor to inform the patient what the office's privacy policy is, still require stringent protections of confidentiality. And if a patient disagrees with some aspect of the privacy policy, they can request a change for the use of their records, and the doctor must acknowledge that request in the patient's file, and follow their request.
Your objections seem to be unnecessarily hysterical, and overtly partisan.