We could probably implement your first thing but just extending HIPAA to cover all entities, not just health care providers. HIPAA's privacy, security, data sel

We could probably implement your first thing but just extending HIPAA to cover all entities, not just health care providers. HIPAA's privacy, security, data selling, and breach notification rules are exactly what we need and could effectively apply to any business.