The nation's most-stringent state law to protect personal health data begins to take effect on March 31, affecting countless companies that do business in Washington state.