Trump’s Personnel Agency Is Asking For Federal Workers’ Medical Records

The Trump management is softly seeking unprecedented entree to aesculapian records for millions of national workers and retirees and their families.

A brief notice from nan Office of Personnel Management could dramatically alteration which personally identifiable aesculapian accusation nan agency obtains, giving it nan powerfulness to spot prescriptions labor had filled aliases what curen they sought from doctors.

The regularisation would require 65 security companies that screen much than 8 cardinal Americans — including national workers, retired members of Congress, message carriers and their contiguous family members — to supply monthly reports to OPM pinch identifiable wellness information connected their members.

The connection is prompting unease from insurers arsenic good arsenic wellness argumentation and ineligible experts, who are concerned astir nan legality of OPM acquiring specified a sweeping database of delicate wellness information, and nan agency’s expertise to safeguard it.

OPM could usage nan information to analyse costs and amended nan system, said Sharona Hoffman, a wellness rule ethicist astatine Case Western Reserve University successful Ohio.

“But,” she said, “they are going to get very, very elaborate and granular information astir everything that happens. The interest present is nan much accusation they have, they could usage it to subject aliases target group who are not cooperating politically.”

OPM spokespeople did not respond to repeated requests for comment. The agency’s announcement asks insurers that connection Federal Employees Health Benefits aliases Postal Service Health Benefits plans to furnish “service usage and costs data,” including “medical claims, drugstore claims, brushwood data, and supplier data.” It says nan information will “ensure they supply competitive, quality, and affordable plans.”

The notice, posted and sent to insurers successful December, does not instruct them to redact identifying accusation — a burdensome process that they would request national guidance to complete.

Instead, it states that insurers are legally permitted to disclose “protected wellness information” to OPM. Several experts successful wellness argumentation and rule consulted by KFF Health News said they interpreted nan petition to mean nan Trump management was seeking identifiable data.

The petition comes a twelvemonth into a Republican management that has been defined by haphazard wide layoffs and firings of thousands of national workers, including dozens who say they were targeted successful acts of political retaliation aliases for not embracing nan White House’s agenda.

Under President Trump, nan authorities has besides routinely tested nan ineligible bounds of sharing delicate and personally identifiable taxation aliases health information crossed authorities agencies successful its efforts to transportation retired wide migration arrests aliases place fraud.

“You tin expect a script wherever this accusation connected 8 cardinal Americans is now successful nan hands of OPM and there’s a existent interest of really they usage it,” said Michael Martinez, elder counsel astatine Democracy Forward, an defense statement that revenge a nationalist remark opposing OPM’s connection successful February. Martinez antecedently worked astatine OPM.

“They’ve fixed nary accusation astir really they would dainty that accusation erstwhile they person it,” he said.

Among Martinez’s concerns is really nan management mightiness usage accusation astir labor who person sought abortions — 41 states person immoderate type of abortion prohibition — aliases transgender treatment, aesculapian attraction that nan Trump management has tried to curb.

The American Federation of Government Employees, nan largest national representing national workers, did not respond to requests for comment.

Martinez and others who reviewed nan announcement for KFF Health News said nan connection was truthful vague that they were uncertain, exactly, what aesculapian records OPM wants to access.

At nan very least, they said, nan connection would let nan agency to entree nan aesculapian and pharmaceutical claims of patients pinch their identifying information, specified arsenic names and commencement dates. Claims information besides includes diagnoses, treatments, sojourn magnitude and supplier information.

OPM’s petition to position “encounter data” could let nan agency to look astatine “anything and everything,” Hoffman noted.

That could see elaborate aesculapian records, specified arsenic a doctor’s notes aliases after-visit summaries.

Jonathan Foley, who worked astatine OPM advising connected nan Federal Employees Health Benefits programme during nan Obama and Biden administrations, said he doubts nan agency has nan capacity to ingest specified minutiae.

The agency, however, could easy statesman postulation of personally identifiable aesculapian and pharmaceutical claims accusation from insurers, he said.

Foley said he sees a use to OPM having broader entree to de-identified claims data. In caller years, OPM has ramped up its study of claims data, which has allowed it to analyse medicine supplier costs and promote plans to connection national workers cheaper alternatives. He’s worried, though, that nan Trump administration’s connection goes excessively far, because it appears to activity identifiable data.

“It’s benignant of shocking to deliberation of them having protected wellness accusation without having strict guardrails,” he said.

The Health Insurance Portability and Accountability Act of 1996, aliases HIPAA, requires definite organizations that support identifiable wellness accusation — specified arsenic hospitals and insurers — to protect it from being disclosed without diligent consent.

Those entities tin disclose specified accusation without consent only successful circumstantial scenarios, pinch a justification that it is deemed “reasonable” aliases “necessary.” Even then, HIPAA mandates that they supply only nan minimum magnitude of accusation required.

OPM argues successful its announcement that it is entitled to nan accusation from insurers “for oversight activities.”

But respective group who reviewed nan announcement questioned whether OPM’s mentation for requesting nan accusation is sufficient.

“The connection successful it seems rather wide and encompasses perchance a batch of accusation and information and is benignant of ray connected justification,” said Jodi Daniel, a integer wellness strategist who helped create nan ineligible model for HIPAA privateness rules much than 2 decades ago.

Several awesome insurers that connection national worker wellness plans — including nan Blue Cross Blue Shield Assn., Kaiser Permanente and UnitedHealthcare — declined to remark connected their plans to comply pinch nan announcement aliases connection penetration connected wherever plans to instrumentality nan information sharing stood.

Only 1 insurer individually weighed successful pinch a nationalist remark connected OPM’s plan. In March, CVS Health executive Melissa Schulman urged nan national agency to reconsider its proposal.

“OPM’s petition raises important HIPAA compliance issues,” Schulman wrote, arguing that national rule allows nan agency to analyse records but not to cod data. Insurers would beryllium breaking nan rule by providing individual wellness accusation for OPM’s “vague and wide broad purposes,” she added.

Schulman, who did not respond to further questions from KFF Health News, besides raised concerns astir a deficiency of information privateness protections. She noted that insurers could beryllium liable for information breaches aliases different situations “where user wellness accusation is inappropriately shared and extracurricular of our control.”

In 2015, OPM announced nan individual records of astir 22 cardinal Americans had been stolen from nan agency successful a information breach that has been blamed connected nan Chinese government.

The Assn. of Federal Health Organizations, which represents CVS Health and dozens of different national wellness scheme carriers, besides weighed successful pinch a 122-page remark opposing nan notice. In it, AFHO Chair Kari Parsons emphasized that security carriers are bound by HIPAA to safeguard individual wellness information.

Federal rule requires carriers “to furnish ‘reasonable reports’ OPM determines to beryllium necessary,” Parsons wrote, “not to furnish nan individual claims information of each individual.”

This isn’t nan first clip OPM has requested elaborate information from insurers. In nan AFHO comment, Parsons noted OPM had made a akin connection successful 2010, prompting HIPAA concerns. She described how, aft respective years of negotiations pinch AFHO, they discussed — but OPM ne'er finalized — an statement successful 2019 for carriers to stock de-identified information pinch OPM.

But since then, Parsons wrote, OPM has collected specified elaborate accusation connected enrollees and their families that, pinch OPM’s caller request, nan agency whitethorn beryllium capable to trace moreover de-identified records to individuals.

OPM has not provided immoderate update since closing comments successful March. The agency would request to people a last determination earlier thing officially changes.

Seitz and Rosenfeld constitute for KFF Health News, a nationalist newsroom that produces in-depth publicity astir wellness issues and is 1 of nan halfway operating programs astatine KFF.