Us law.
https://www.cdc.gov/phlp/publications/topic/hipaa.html
“The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that required the creation of national standards to protect sensitive patient health information from being disclosed without the patient’s consent or knowledge.”