Medicare has federal as well as state regulations for privacy and for submitting claims, just as any government agency does. As for your private insurance, they also have claim forms, etc. which are mandatory if your doctor is paid directly.
If you have ever signed a claim form, you have signed a release of medical records to your insurance company because you want your doctor to be paid. You can avoid it all by paying cash and not turning in a bill to your ins. co.