The same is happening Europe-wide too. Everybody always points to the GPDR legislation. You know what is a feature of the GPDR too?
Every European government (even some non-EU ones) can grant any exception to anyone to the GPDR for any reason. And, of course, every last one has granted an exception to the police, to courts, to the secret service, their equivalent of the IRS, and to government health care (which imho is a big problem when we're talking mental health care), and when I say government health care, note that this includes private providers of health care, in other words insurances.
Note: these GPDR exclusions includes denying patients access to their own medical records. So if a hospital lies about "providing you" with mental health treatment (which they are incentivized to do, they get money for that), it can helpfully immediately be used in your divorce. For you yourself, however, it is conveniently impossible to verify if they've done this. Nor can you ask (despite GPDR explicitly granting you this right) to have your medical records just erased.
In other words. GPDR was explicitly created to give people control over their own medical records, and to deny insurance providers and the IRS access. It does the exact opposite.
Exactly the sort of information I would like to hide, exactly the people I would find it critical to hide it from. In other words: GPDR applies pretty much only to US FANG companies ... and no-one else.
So: if you don't pay tax and use that money to pay for a cancer treatment, don't think for a second the GPDR will protect you. If you have cancer and would like to get insured, the insurance companies will know. Etc.