> I work where privacy isn't just good behavior, it's enforced by law

HIPAA/medical?