Federal Judge Allows Limited Medicaid Data Sharing with Immigration Officials

In a significant legal development affecting healthcare privacy, a federal judge has ruled that the U.S. Department of Health and Human Services (HHS) can resume sharing certain personal data of undocumented Medicaid enrollees with deportation officials, beginning January 8.

The decision by U.S. District Judge Vince Chhabria in San Francisco represents a partial setback for 22 states that had sued the administration over privacy concerns. While allowing the data sharing to resume, the judge placed substantial limitations on what information can be transferred.

According to the ruling, HHS can only share “basic biographical, location and contact information” about immigrants living in the U.S. illegally with Immigration and Customs Enforcement (ICE) officers. The judge explicitly prohibited the sharing of sensitive medical information while the lawsuit continues.

“This sharing is clearly authorized by law and the agencies have adequately explained their decisions,” Judge Chhabria wrote in his ruling last week. The temporary order blocking broader data sharing expired on January 5.

The ruling maintains significant protections, prohibiting HHS and the Centers for Medicare and Medicaid Services (CMS) from disclosing detailed medical information or any Medicaid data about U.S. citizens or legal immigrants from the plaintiff states. Judge Chhabria criticized the federal policies for being “totally unclear about what that information would be, why it would be needed for immigration enforcement purposes, and what the risks of sharing it with DHS would be.”

This legal battle emerged after an Associated Press investigation revealed that HHS had begun sharing personal data on millions of Medicaid enrollees with immigration authorities in several states last June. The situation escalated in July when CMS entered into a new agreement giving the Department of Homeland Security (DHS) daily access to view personal data—including Social Security numbers and home addresses—of all 77 million Medicaid enrollees nationwide. Neither of these data-sharing arrangements was publicly announced.

The privacy implications are particularly significant in the context of emergency Medicaid. While undocumented immigrants are generally ineligible for the standard Medicaid program, federal law requires all states to offer emergency Medicaid coverage that pays for lifesaving services in emergency rooms to anyone, regardless of citizenship status.

Healthcare and immigration advocates have expressed concern that such data sharing could deter vulnerable individuals from seeking necessary emergency medical care. The fear of deportation might prevent people from accessing critical healthcare services for themselves or their children, potentially creating both individual health crises and broader public health challenges.

CMS defended its actions in November, stating that providing data to ICE is “consistent with federal laws” and intended “to advance administration priorities related to immigration.”

The data-sharing initiative is part of a broader immigration enforcement approach that has involved multiple federal agencies. In a related case last May, another federal judge refused to block the Internal Revenue Service from sharing immigrants’ tax data with ICE to help agents locate and detain people living in the U.S. illegally.

As of Monday, it remained unclear whether HHS had actually resumed sharing the limited data on undocumented Medicaid recipients, as permitted by the ruling. The agency did not immediately respond to requests for comment on its implementation plans.

The case highlights the ongoing tension between immigration enforcement priorities and healthcare privacy protections, placing state governments, healthcare providers, and vulnerable populations in a difficult position as the legal battle continues to unfold.