Oh, huh. I just found this looking something up in HIPAA:

(a)
(1) Standard: Right of an individual to request restriction of uses and disclosures.

(i) A covered entity must permit an individual to request that the covered entity restrict:

(A) Uses or disclosures of protected health information about the individual to carry out treatment, payment ( Read more... )