A U.S. law ensuring the security and privacy of medical records and patient information.