California law requires individuals be notified when specified personal information, including health and medical insurance information, that is stored electronically is breached. New federal law (HITECH) also requires notifications when private health information is breached. This checklist summarizes what you need to do when your patients’ information is stolen or unlawfully accessed.