This Wiley Rein LLP memorandum discusses a Pennsylvania District Court's decision in Steinberg v. CVS Caremark Corp., which recognizes both the benefits of the uses and disclosures of de-identified health care information and the primacy of the HIPAA regulatory structure for defining the appropriate rules for this information.