It is already illegal, yet practiced widely because the burden of proof is on the patient that cannot look into the doctor's records because of privacy.