CA proposes medical record privacy rules