. "This month marks the two-year anniversary of a law that enhanced patients??? medical privacy rights, while significantly expanding the obligations that pharmacies and other entities have for protecting sensitive patient information." . . .