OPM’s Controversial Data Plan
- The U.S. Office of Personnel Management proposed requiring insurers to hand over identifiable health data on federal workers. - The plan has drawn concern from privacy and security observers and industry reporters. - The proposal shifts debate from breach prevention to whether institutions should legally collect identifiable health records at all (govinfosecurity.com).
The Office of Personnel Management wants health insurers to send it monthly, claims-level data on federal workers, retirees, postal employees, and their families. (federalregister.gov) The proposal was published as a 60-day notice on December 12, 2025, under the Paperwork Reduction Act, and comments were due February 10, 2026. OPM said it is collecting “service use and cost data” from Federal Employees Health Benefits and Postal Service Health Benefits carriers. (federalregister.gov) In plain terms, claims data is the billing trail of medical care: doctor visits, prescriptions, hospital encounters, and the providers involved. KFF Health News reported the request covers 65 insurers and more than 8 million people, and that the notice does not tell carriers to remove personal identifiers. (kffhealthnews.org) OPM says the data would help it oversee the plans it already manages and make sure they stay “competitive, quality, and affordable.” The notice also says federal health privacy law permits carriers to disclose protected health information to oversight agencies such as OPM for oversight activities. (federalregister.gov) The fight is no longer only about how to secure a database after a breach. It is also about whether OPM should build a centralized database of identifiable health records in the first place. (govinfosecurity.com) That question has sharpened in April 2026, after House and Senate Democrats sent letters urging OPM to withdraw the plan. Federal News Network reported House Democrats wrote on April 17, and Government Executive reported 16 Democratic senators sent a second letter on April 19. (federalnewsnetwork.com) (govexec.com) Lawmakers said the proposal could expose medical visits, prescriptions, and treatment histories, and they argued OPM’s stated oversight rationale is too broad for that level of access. Senate Democrats said the plan could violate the Health Insurance Portability and Accountability Act and doctor-patient confidentiality. (govexec.com) They also tied the dispute to OPM’s record on data security. Federal News Network said Democrats cited the agency’s 2015 breach and more recent access to OPM systems by the Department of Government Efficiency in early 2025 as reasons to doubt OPM can safely hold more sensitive data. (federalnewsnetwork.com) The insurance programs at issue are large. OPM says the Federal Employees Health Benefits program is the largest employer-sponsored health benefits program of its kind, and the Postal Service Health Benefits program began on January 1, 2025. (opm.gov) (federalregister.gov) OPM has not publicly dropped the request. For now, the proposal stands as a test of how far a benefits agency can go in collecting identifiable medical data from the people it insures. (federalregister.gov)
