Therefore, organizations such as the Centers for Medicare and Medicaid Services, the Defense Health Agency, the Veterans Health Administration and others must comply along with any hospital, health system or provider that share information with them.