Federal legislation (Public Law 108-159) enacted on December 4, 2003, that established medical privacy provisions as part of consumer credit law. This bill amended the Fair Credit Reporting Act (FCRA) to include improved medical privacy protections and protections against identity theft.