But there are various safeguards in place for who can get database extracts containing personal data. The typical case is that all patients affected first need to sign a consent agreement. They charge a fee to cover the cost of processing the application.

In general, I'm kindof annoying with whoever submitted this URL to hacker news. I guess there are various complaints one can make about this system, but showing the price list in isolation seems calculated to just cause outrage without understanding...