Healthcare providers are required to obtain patient’s consent before disclosing and medical information, and can face fines and disciplinary action for violating these laws