Your firm is in violation of the federal authority on health information privacy arises from the Health Insurance Portability and Accountability Act of 1996 ( HIPAA ), Standards for Privacy of Individually Identifiable Health Information ( 45 CFR Parts 160 and 164 ). California has several laws on health information privacy, including the Confidentiality of Medical Records Act ( Civil Code 56 et seq. ), the Patient Access to Health Records Act ( Health & Safety Code 123110 et seq. ), the Insurance Information and Privacy Protection Act ( Insurance Code 791 et seq. ), and the Information Practices Act ( Civil Code 1798 et seq. ). Citations for specific rights enumerated in this document are provided below. All the referenced laws may be found on the Privacy Laws page of the California Department of Justice 's Web site. Please provide copies of your security policies, testing and audits that prove your data privacy is compliant from a XXXX party. 
