Over at Venture Beat, David Hamilton asks whether Microsoft's medical records system really protects the privacy of the patients whose records it holds. HealthVault began with a lot of attention to how serious it was about security issues, Hamilton writes, but the service (and other privately managed systems) isn't covered by HIPAA rules. Seems like only time will tell.