Findings from a legislative scan of state-level protections for consumer health data that falls outside the scope of HIPAA located here.