A bit old news, which I picked up from the excellent Bruce Schneiers blog.
The Canadian government conducted a security audit of the electronic health record implementation in British Columbia. It shows just what you could expect: a severe lack of security of any kind.
The Vancouver Sun reported on this last month. The report is available as a pdf here.