With California's data breach notification law now being extended to cover health care organizations, businesses in this space must pay closer attention to how the personal health information entrusted to their care is safeguarded.