Yes, patient records carry full HIPAA obligations, documented via our compliance services.