Surely you have legal access to your patient data? It's called HIPAA in the USA.