The strongest data privacy bill passed this year focused on health. It’s already a model for other states.