The call for widespread adoption of electronic medical records has prompted some states to pass stringent privacy laws to protect their residents against fraud or identity theft. But a new analysis finds these laws seem to significantly diminish the effectiveness of the new technology.