$$Being healthy$$ is a healthcare provider that provides Telehealth services to its clients. They render their services by utilizing a prominent videoconferencing platform. At $$Being healthy$,$ it is the responsibility of the front desk executive to collect and store the patient's data in the clinical software system. Patients are asked to fill up their details and relevant information when they come for the appointment. This data is then transferred to the database and after storing the information in the database, the front office executive leaves the forms at the front counter where it is easily accessible to all. The database used by $$Being healthy$$ to store their patient's personal information is unsecured and has no password protection or security protections in place.

$$Being Healthy$$ also lacks any privacy policy in their organisation. Files are transferred to other practitioners without any secure electronic system.

A nutritionist named Cathy also shares their patient's private information with her friends.

Recently, there was a cyberattack on $$Being Healthy$$ in which the personal details of their clients were compromised, and their security numbers were used for identity theft.

From the above$-$provided information, answer the following questions:

a$.$ List any two $(2)$ laws that have been breached in the above scenario. Give specific example of how they have breached them.