Is the "carry out its health-care functions" argument a stretch? Something is seriously broken with a system that lets them give away your health data without

Is the "carry out its health-care functions" argument a stretch? Something is seriously broken with a system that lets them give away your health data without your consent, and the lack of anonymization only compounds the injury.