Which federal law primarily governs the privacy of patient health information in the dental anesthesia setting?