Patient privacy laws protect people from having their medical records sold by doctors and hospitals.  But state agencies which can access medical records are exempt from federal laws governing privacy.  It is unclear how common it is for this to happen; yet, this piece suggests it may not be uncommon at all.    MORE