The Consumer Product Safety Commission (CPSC) is requesting hospitals send sensitive medical records of all patients who may visit to a private contractor. What makes the CPSC’s request so strange is that they don’t just want medical information, but names and addresses as well. So a small, understaffed agency without leadership is expected to compile and protect sensitive medical data for millions of Americans. KFF Health News independently confirmed with over a dozen hospitals that they had been approached. Federal public health authorities cannot legally mandate that private health data be reported.