Each year in the United States individuals are required to sign at least 25 million authorizations for the release of their health records as a condition of employment, and submitting claims for benefits. Most of the authorizations still involve paper records, and they are of unlimited scope. Even where the authorizations are more limited, it is common for custodians to send complete records because it is infesible to limit the information. The disclosure of comprehensive health records to third parties that have the economic leverage over individuals to compel authorizations raises serious privacy concerns.