There are conflicting interests at work in the Medical area. The need for information about a patient in order to care for the patient versus Data Protection and the privacy concerns for patient's privacy. The following are some of the restrictions apply in California:
In addition, most organizations have a dataretentionpolicy.