Looks like it will take Federal legislation - in this case guided by new HIT (Health Information Technology) to drive the need for more complex authentication regulation.
In this blog we've said that it seems as if people, us, don't really care about privacy, at least as evidenced by the openness with which we post our stuff and our identity in social media.
It will be very interesting to see whether or not we care the same about our health records or finances.
The Beat Goes On!
Thanks for Marianne McGee and Health Care Info Security
Multi-Factor Authentication Gets a Boost - HealthcareInfoSecurity