The regulatory problem has only gotten worse since the passage of the ACA. Premiums are charged based on where the customer lives, not at the state level, but at the county level. If the county you live in has a higher incidence of disease than another county in the same state, there will be a premium differential charged for living in the 'unhealthy' area. Health insurance companies are still not permitted to operate across state lines, which further concentrates the risk.
It's still not clear that applying more IT to medical care will generate the savings in health care costs that advocates hoped for initially. It does, however, raise the spectre that your personal medical and identity information will be at increased risk of being stolen or misused, since recent events have shown that even the US government is not immune to having the fingerprint and other personal data of its employees being stolen by hackers.
http://www.reuters.com/article/us-usa-cybersecurity-fingerprints-idUSKCN0RN1V820150923
And remember, once an IT system is installed, it's only a matter of time before it becomes obsolete. How many hospitals want to be involved in running sizable IT shops, rather than providing care to patients?