HIPAA is 20 years old. What has it meant for healthcare?

What has the law that promised portability, privacy and security accomplished in 20 years and where has it fallen short?