Service Areas

HIPAA + State Privacy Law Compliance, State by State

We specialize in federal HIPAA combined with state-specific privacy laws. Each state below has its own regulatory layer that federal HIPAA doesn't cover — and each one shapes how practices there actually get fined.

MHMDA

Washington

Federal HIPAA + Washington MHMDA compliance, delivered as one ongoing service.

My Health My Data Act · enacted 2023 · private right of action

Spokane
Seattle

CMIA + CCPA

California

HIPAA + California CMIA + CCPA/CPRA compliance — the three layers California healthcare practices actually need.

Confidentiality of Medical Information Act + CCPA/CPRA · enacted 1981 (CMIA) / 2020 (CCPA) · private right of action

Los Angeles
San Francisco
Sacramento

HB 300

Texas

Federal HIPAA + Texas HB 300 compliance — built for the AG's enforcement priorities.

Texas Medical Records Privacy Act · enacted 2011 (major expansion)

Houston
Dallas

SHIELD Act

New York

Federal HIPAA + NY SHIELD Act compliance — for practices that serve New York patients, wherever you're located.

Stop Hacks and Improve Electronic Data Security Act · enacted 2019

New York City

Idaho § 28-51 + WA MHMDA

Idaho

HIPAA compliance plus cross-border MHMDA handling — purpose-built for North Idaho practices that serve Washington patients.

Idaho Identity Theft Act + Cross-Border MHMDA Exposure · enacted 2006 (Idaho) / 2023 (MHMDA) · private right of action

Coeur d'Alene

Not sure which state laws apply to you?

Free audit, no commitment. We'll map federal HIPAA and every state law that affects your practice.

Get Free Compliance Audit