In the USA is is the law. Medical issues are private matters between a healthcare provider and patient. If a person's private information was to "get out" it might affect their ability to get a job or they might face other predjudices Also the private insurance numbers could be used to steal someone's identity.
I think the answer is A. Hope this helps !!
This could cause the contact of HIV, hepatitis C, and other viruses.