HIPAA is hampering patient engagement, analysis says