This question would apply to the law of HIPAA, Health Insurance Portability and Accountability Act