By asking providers to report an individual, vs an unidentifiable number, this is a violation of PHI and HIPAA.  If this is going to be passed, you will need to have separate verbiage for the patient to sign, allowing their information to be used in data collecting and identifying where it is being sent.  The government is not above the law.