Is this an invasion of privacy?

Publix pharmacy is the* only* place to get sound legal advice.

I was just looking on my HMO web site and the law is the FTC Red Flags Fule.

If you need me to “prove” who I am I will show you my ID but I will not hand it over to you nor allow you to scan it. If you are unable to read it and determine I am who I say I am, then the problem lies with you and your training.

In reading the Red Flag Rule, unless you as an institution are extending credit to me, the RFR does not apply. When I buy something with a credit card, the company extending credit to me is the card company and not you.

http://www.ftc.gov/bcp/edu/microsites/redflagsrule/faqs.shtm

The way the HMO person explained it to me they are considered a creditor. Maybe because medical bills aren’t usually paid in ful at the time of service?