schwit1 writes "Like emails and documents stored in the cloud, your prescription medical records may have a tenuous right to privacy. In response to a lawsuit filed by the American Civil Liberties Union (ACLU) over the privacy of certain medical records, the U.S. Drug Enforcement Administration is arguing (ACLU response) that citizens whose medical records are handed over to a pharmacy — or any other third-party — have 'no expectation of privacy' for that information." Oregon mandates that pharmacies report information on people receiving certain drugs to a centralized database (ostensibly to "...help people work with their health care providers and pharmacists to know what medications are best for them."). State law does allow law enforcement to access the records, but only with a warrant. The DEA, however, thinks that, because the program is public, a citizen is knowingly disclosing that information to a third party thus losing all of their privacy rights (since you can always just opt out of receiving medical care) thanks to the Controlled Substances Act. The ACLU and medical professionals (PDF) don't think there's anything voluntary about receiving medical treatment, and that medical ethics override other concerns.