The Health and Human Services (HHS) regulations on medical records, approved by the Clinton administration in December 2000, and by the Bush administration in April 2001, improved confidentiality protection from the preliminary rule by incorporating fair information practices, consent and minimal necessary disclosures provisions. The Fall 2002 removal of the consent requirements seriously breaches these promises. The consent provisions need to be strengthened, not weakened.