. . . . . "CDPHP may disclose your PHI to report information to state and federal agencies that regulate us such as the U.S. Department of Health and Human Services and where otherwise as required by federal, state, or local law." . .