California court limits liability for loss of certain patient information under CMIA