It's partially because it's so complicated.

I was a licensed healthcare professional and even I was shocked when my medical information was given to police without a warrant, a legal arrest, and without my consent. As it turns out, totally legal.