. . . . . "The state and its vendor will not collect Social Security numbers, medical records, lab results or other information that is not included in a health care claim." .