The Office of Personnel Management (OPM) is moving forward with a plan to collect detailed medical records from more than 8 million federal employees, retirees, and their families. The agency, under the Trump administration, announced it will begin gathering personal health information to detect potential fraud in government-funded health benefits programs.
What Happened
Last month, OPM posted a notice stating that starting July 24, it will begin routine collection of identifiable medical records from federal enrollees. This data collection includes names, addresses, Social Security numbers, diagnoses, prescriptions, and payment information from the Federal Employees Health Benefits (FEHB) and Postal Service Health Benefits (PSHB) programs. The agency recently updated the plan to pseudonymize personal identifiers such as names and Social Security numbers before analysts review the data, although it retains the ability to reidentify individuals if necessary.
Additionally, OPM will seek data from Medicare to analyze records for dual enrollees who receive coverage through both FEHB and Medicare. This expansion attempts to better understand health care usage and identify anomalies that may indicate fraud or overpayments.
Key Facts
The FEHB and PSHB plans serve over 8 million federal workers and retirees, with program costs totaling approximately $80 billion annually—$50 billion of which is federally funded, and $30 billion paid by enrollees. The new policy requires 65 insurance companies to submit detailed claims data to OPM, including personal and medical information. OPM intends to scramble member IDs for internal data handling but will keep birth years intact and reserve the right to reidentify individuals.
The collection process mostly aligns with HIPAA rules, except for the use of member IDs, which can potentially identify enrollees. The agency’s General Counsel, Kurt Dykstra, emphasized that the data is key for detecting fraud not only by providers but also by enrollees. Suspicious records flagged by data analysts could be referred to OPM’s Office of Inspector General for investigation.
What This Means
This initiative reflects the administration’s increased focus on combating fraud within federally funded health insurance programs, potentially saving billions of taxpayer dollars. By analyzing comprehensive medical claims data, OPM hopes to uncover patterns of misuse that were previously difficult to detect. However, the collection of sensitive medical information raises significant privacy concerns, as health data—even when pseudonymized—can often be reidentified due to the specificity of medical conditions and treatments.
For federal workers and retirees, this means heightened scrutiny of their health claims, which could translate into improved financial integrity of benefits programs but also increased risks to personal health privacy. Privacy advocates argue that “pseudonymization” may not be sufficient to protect individuals from exposure, given the detailed nature of the data collected. The trust deficit between OPM and federal employees highlighted by lawmakers suggests that the rollout could face further pushback unless additional safeguards or legislative oversight measures are implemented.
Background
The plan was first announced in December but drew criticism for lacking clarity about how OPM intended to use the data and safeguard it. In response to privacy concerns, the agency amended its procedures to remove direct identifiers before data analysis. Health privacy experts caution that although the initiative complies mostly with HIPAA, the ability to reidentify individuals and the extensive nature of collected data may still pose risks. Similar concerns have been raised in the private sector, such as lawsuits accusing companies of using employees’ health data to target layoffs.
Most federal retirees enroll in Medicare alongside FEHB plans at age 65, prompting OPM’s request for Medicare claims data to achieve a fuller picture of health benefits usage across programs.
What Remains Unclear
It remains uncertain how effective OPM’s fraud detection efforts will be based solely on claims data analysis and to what extent the agency will be able to prevent misuse without wrongly targeting legitimate medical use. The scope of “potential anomalies” triggering investigations has not been detailed, nor have the criteria for referring cases to the Inspector General’s office. Furthermore, the extent to which federated privacy controls will protect individuals from data breaches or inappropriate use within OPM is still under scrutiny.
The agency has not provided specific examples or evidence of fraud committed by federal employees or retirees to justify the expansive data collection.
What Comes Next
OPM’s notice allows data collection to begin as early as July 24. The agency’s stated next steps include data acquisition from insurers and Medicare, data pseudonymization, and internal analysis to identify irregularities. It is not clear if OPM plans to engage Congress or federal employee representatives to address privacy concerns further. Ongoing scrutiny by privacy advocates, lawmakers, and federal unions is expected as implementation proceeds.
Sources
This article is based on reporting and publicly available information from the following sources:
Read more US News stories on Goka World News.