Additionally, officials believe some collectors had access to patient health records, a violation of federal privacy laws. (debt.org)
Moreover, federal privacy legislation requires some due diligence in selecting cloud service providers, as well as contractual safeguards, as you note. (slaw.ca)
The complaint also alleges the defendants violated federal privacy law for failing to provide a required privacy notice. (creditrepairvip.com)