Kaiser Permanente agreed to a $46M settlement over claims that patient health information was improperly disclosed online.