It contains important provisions requiring the generation of an audit trail of information being accessed, and allows patients the ability to partition their data so that, for example, genetic information is not revealed when they go for a flu shot.