it established new limitations on use and disclosure for marketing purposes, prohibited selling medical information, expanded individuals’ rights to accessing their own information, and to obtain restrictions from certain disclosures of protected heath information to health plans.
