While common, and almost arguably a rewrite of their other privacy policy, this phrasing is actually different than what is used on roughly every other maryland

While common, and almost arguably a rewrite of their other privacy policy, this phrasing is actually different than what is used on roughly every other maryland .gov site, which all share privacy policies, even where they have forms or other info being submitted. I can find a very small number of trivial exceptions to this. So it is at least a little surprising. The ACA of course, is many thousand pages. I have no idea if they are required to have this. I'll point out that while it's currently 404'ing, california's "covered california" site had a privacy policy up that said something similar: http://webcache.googleusercontent.com/search?q=cache:Tqicl-XfzSsJ:www.coveredca.com/npp.html+&cd=1&hl=en&ct=clnk&gl=us http://webcache.googleusercontent.com/search?q=cache:Tqicl-X... "Health care operations: Information may be shared with health plans and government agencies to oversee how the insurance is being provided, for quality assurance, audits, for fraud and abuse prevention programs, and for planning and management purposes;" "Other limited purposes: Information will be shared for other purposes when we are required by law to do so, such as for workers’ compensation, public health activities and risks, health oversight activities, law enforcement activities, coroners, medical examiners and funeral directors, military and veterans affairs, national security and intelligence activities, protective services for the president and others, and for inmates."