Medical records privacy law goes beyond HIPAA. State privacy requirements, patient authorization rules, litigation procedures, and specialized protections such as 42 CFR Part 2 can all affect how records are requested and disclosed. Learn what legal, insurance, and other regulated teams should consider when building a secure medical record