"It's called HIPAA, and it's a federal law."