probably because nobody read it. It should be illegal to share personal data with 3rd parties without EXPLICIT permission for each sharing instance. In order to share your x-ray/medical scans/information it must be done on a case by case basis. This should be required for all personal information