There is nothing legally stopping healthcare organizations from asking patients for informed consent to share their anonymized data with researchers. The government even provides clear guidelines for de-identification.

https://www.hhs.gov/hipaa/for-professionals/privacy/special-...