ToS can't negate HIPAA or any other laws that could potentially be violated though.