Health care providers exempt from new state privacy law