We also found a few additional notable patterns in state laws. Fewer than a quarter of states had language that addressed any of the following: disclosure to contacts of a person with a communicable disease, in some cases including prehospital personnel exposed to the bodily fluids or respiratory droplets of a person with particular infectious diseases; disclosure of public health information by the state to federal public health officials (most state statutes specifically mention the Centers for Disease Control and Prevention or the HHS); secondary disclosure of personally identifiable information provided by the health department to a third party; or when certain types of health threats may or must be disclosed to law enforcement. In a few states, disclosure of certain personally identifiable health information from one state agency to another even appeared to be prohibited. For example, in Connecticut, the Medicaid program could only obtain information that supported payments for the care of individuals receiving medical assistance. Although this may be an important protection, this approach may indicate a lost opportunity for collaboration between the health care delivery and financing system and public health authorities seeking to design or deliver interventions for at-risk populations