A monitoring program is simply a database maintained by the state government that scans prescription information, looking for people receiving CS meds of the same type (pain, anxiety, etc.)from more than one doctor within the same time period. The database of criminal records is an entirely different animal, and they'd have no reason to cross-link them. In states with a monitoring program, they know they'll be able to catch anyone who is DDing anyway, so they have no need to see if you've been in trouble in the past.

As for the issue of patient privacy between HCPs, a doctor could possibly justify "calling around" to other doctors and pharmacies and defend against a charge of violation of privacy by claiming that a patient's request for a certain drug is "probable cause" for suspicion of "unlawful intent" on the part of the patient (doctor shopping). These doctor shopping laws specifically exempt all doctor/patient communication from any protection, and I would bet it extends to the mere suspicion (of doctor shopping) as well.