Trump administration personnel agency is asking for federal workers’ medical records
The Trump administration is quietly looking for unprecedented entry to medical records for hundreds of thousands of federal staff and retirees, and their households.
TO brief notice from the Office of Personnel Management may dramatically change which personally identifiable medical info the agency obtains, giving it the ability to see prescriptions staff had crammed or what remedy they sought from docs. The regulation would require 65 insurance coverage firms that cowl greater than 8 million Americans — together with federal staff, retired members of Congress, mail carriers, and their speedy relations — to offer month-to-month stories to OPM with identifiable well being knowledge on their members.
The proposal is prompting unease from insurers in addition to well being coverage and authorized specialists, who’re involved in regards to the legality of OPM buying such a sweeping database of delicate well being info, and the agency’s means to safeguard it.
OPM may use the information to research prices and enhance the system, stated Sharona Hoffman, a well being regulation ethicist at Case Western Reserve University in Ohio.
“But,” she stated, “they are going to get very, very detailed and granular data about everything that happens. The concern here is the more information they have, they could use it to discipline or target people who are not cooperating politically.”
OPM spokespeople didn’t reply to repeated requests for remark. The agency’s discover asks insurers that supply Federal Employees Health Benefits or Postal Service Health Benefits plans to furnish “service use and cost data,” together with “medical claims, pharmacy claims, encounter data, and provider data.” It says the information will “ensure they provide competitive, quality, and affordable plans.”
The discover, posted and despatched to insurers in December, doesn’t instruct them to draft figuring out info — a burdensome course of that they would want federal steerage to finish.
Instead, it states that insurers are legally permitted to reveal “protected health information” to OPM. Several specialists in well being coverage and regulation consulted by KFF Health News stated they interpreted the request to imply the Trump administration was looking for identifiable knowledge.
The ask comes a yr right into a Republican administration that has been outlined by haphazard mass layoffs and firings of 1000’s of federal workers, including dozens who say they were targeted in acts of political retaliation or for not embracing the White House’s agenda. Under President Donald Trump, the federal government has additionally routinely examined the authorized bounds of sharing delicate and personally identifiable tax or health information throughout authorities businesses of their efforts to hold out mass immigration arrests or pursue determine fraud.
“You can anticipate a scenario where this information on 8 million Americans is now in the hands of OPM and there’s a real concern of how they use it,” stated Michael Martinez, senior counsel at Democracy Forward, an advocacy group that filed a public remark opposing OPM’s proposal in February. Martinez beforehand labored at OPM.
“They’ve given no information about how they would treat that information once they have it,” he stated.
Among Martinez’s issues is how the administration may use details about staff who’ve sought abortions — 41 states have some kind of abortion ban — or transgender remedy, medical care that the Trump administration has tried to curb.
The American Federation of Government Employees, the most important union representing federal staff, didn’t reply to requests for remark.
Martinez and others who reviewed the discover for KFF Health News stated the proposal was so imprecise that they had been unsure, precisely, what medical records OPM desires to entry.
At the very least, they stated, the proposal would enable the agency to entry the medical and pharmaceutical claims of sufferers with their figuring out info, resembling names and delivery dates. Claims knowledge additionally consists of diagnoses, remedies, go to size, and supplier info.
OPM’s request to view “encounter data” may enable the agency to take a look at “anything and everything,” Hoffman famous.
That may embrace detailed medical records, resembling a health care provider’s notes or after-visit summaries.
Jonathan Foley, who labored at OPM advising on the Federal Employees Health Benefits program throughout the Obama and Biden administrations, stated he doubts the agency has the potential to ingest such minutes.
The agency, nevertheless, may simply start assortment of personally identifiable medical and pharmaceutical claims info from insurers, he stated.
Foley stated he sees a profit to OPM having broader entry to de-identified claims knowledge. In latest years, OPM has ramped up its evaluation of claims knowledge, which has allowed it to look at prescription drug prices and encourage plans to supply federal staff cheaper alternate options. He’s nervous, although, that the Trump administration’s proposal goes too far, as a result of it seems to hunt identifiable knowledge.
“It’s kind of shocking to think of them having protected health information without having strict guardrails,” he stated.
The Health Insurance Portability and Accountability Act of 1996, or HIPAA, requires sure organizations that preserve identifiable well being info — resembling hospitals and insurers — to guard it from being disclosed with out affected person consent.
Those entities can disclose such info with out consent solely in particular situations, with a justification that it is deemed “reasonable” or “necessary.” Even then, HIPAA mandates that they supply solely the minimal quantity of data required.
OPM argues in its discover that it is entitled to the data from insurers “for oversight activities.”
But a number of individuals who reviewed the discover questioned whether or not OPM’s clarification for requesting the data is adequate.
“The language in it seems quite broad and encompasses potentially a lot of information and data and is sort of light on justification,” stated Jodi Daniel, a digital well being strategist who helped develop the authorized framework for HIPAA privateness guidelines over 20 years in the past.
Several main insurers that supply federal worker well being plans — together with the Blue Cross Blue Shield Association, Kaiser Permanente, and UnitedHealthcare — declined to touch upon their plans to adjust to the discover or supply perception on the place plans to implement the information sharing stood.
Only one insurer individually weighed in with a public touch upon OPM’s plan. In March, CVS Health government Melissa Schulman urged the federal agency to rethink its proposal.
“OPM’s request raises substantial HIPAA compliance issues,” Schulman wrote, arguing that federal regulation permits the agency to look at records however to not acquire knowledge. Insurers could be breaking the regulation by offering private well being info for OPM’s “vague and broad general purposes,” she added.
Schulman, who didn’t reply to extra questions from KFF Health News, additionally raised issues a couple of lack of knowledge privateness protections. She famous that insurers may very well be liable for safety breaches or different conditions “where consumer health information is inappropriately shared and outside of our control.”
In 2015, OPM introduced the non-public records of roughly 22 million Americans had been stolen from the agency in an information breach that has been blamed on the Chinese authorities.
The Association of Federal Health Organizations, which represents CVS Health and dozens of different federal well being plan carriers, additionally weighed in with a 122-page remark opposing the discover. In it, AFHO Chair Kari Parsons emphasised that insurance coverage carriers are certain by HIPAA to safeguard private well being info.
Federal regulation requires carriers “to furnish ‘reasonable reports’ OPM determines to be necessary,” Parsons wrote, “not to furnish the individual claims data of every individual.”
This is not the primary time OPM has requested detailed knowledge from insurers. In the AFHO remark, Parsons famous OPM had made the same proposal in 2010, prompting HIPAA issues. She described how, after a number of years of negotiations with AFHO, they mentioned — however OPM by no means finalized — an settlement in 2019 for carriers to share de-identified knowledge with OPM.
But since then, Parsons wrote, OPM has collected such detailed info on enrollees and their households that, with OPM’s new request, the agency could possibly hint even de-identified records to people.
OPM has not offered any replace since closing feedback in March. The agency would want to publish a closing choice earlier than something formally modifications.
KFF Health News is a nationwide newsroom that produces in-depth journalism about well being points and is one of many core working packages at KFF — the unbiased supply for well being coverage analysis, polling, and journalism.
