All of the above I suppose. You forgot to add loss of treatment to those who need it. You haven’t specified which services are being limited but presumably something is lost when we limit offerings.
The HHS Office for Civil Rights (OCR) is charged with protecting an individual patient's health information privacy and security through the enforcement of HIPAA