California Consumer Privacy Act can cause headaches for healthcare orgs