Some states, including WA, require insurance companies to send them information on claims. This information is then sold to researchers and can be tied to an individuals identity, despite their agreements in clinics. There is no opt out for this process. 

We are asking for a minimum of patient consent, especially since many of these states pride themselves on privacy.

https://www.wahealthcarecompare.com/wa-apcd-data-requests