A doctors&#x2F;hospital only needs the flimsiest of &quot;business justifications&quot; to share&#x2F;sell data to whoever they want to. What the data can be used for is limited, but it can be shared all over the place.
Source: Pulling this data is part of my job.