HCA statement on use of Apple Health (Medicaid) client data

HCA statement regarding use of Apple Health client data - August 2025 update

HCA sends information to the Centers for Medicare and Medicaid Services (CMS) for people who are enrolled in Apple Health programs that get federal funding, including Apple Health Expansion. This is required by law. Apple Health clients may view the client frequently asked questions (FAQ) (available in 20 languages) to learn more about their privacy and how their information is shared. For the most up to date information regarding use of Apple Health client data, view the Apple Health data privacy document.

On August 13, a federal judge granted a preliminary injunction to block the Department of Homeland Security (DHS) from using Medicaid data obtained from Washington and 19 other plaintiff states for immigration enforcement purposes.

The preliminary injunction will remain in place either until after HHS and DHS complete a reasoned decision-making process that complies with the Administrative Procedure Act, or until litigation concludes.

We collect, use, and share the following information about you:

  • Your personally identifying information, such as your name, address, and social security number.
  • Information relating to your enrollment in Apple Health, such as what program you’re enrolled in, start and end dates of your coverage, your household size, and your income.
  • Information relating to your health, such as services you have received, clinical notes, prescriptions, and what health care providers you have visited.

August 13: A federal judge granted a preliminary injunction to block the Department of Homeland Security (DHS) from using Medicaid data obtained from Washington and 19 other plaintiff states for immigration enforcement purposes.

The judge also barred the U.S. Department of Health and Human Services (HHS) from sharing Medicaid data with DHS, saying that Washington and the multistate coalition were likely to succeed on their claim that the action violated the Administrative Procedure Act’s prohibition on arbitrary and capricious agency action.

The preliminary injunction will remain in place either until after HHS and DHS complete a reasoned decision-making process that complies with the Administrative Procedure Act, or until litigation concludes.

July 1: A legal challenge is underway. Washington Attorney General Nick Brown joined a multistate coalition in filing a lawsuit challenging the U.S. Department of Health and Human Services’ (HHS) decision to provide unrestricted access to individual personal health data to the Department of Homeland Security (DHS), which houses Immigration and Customs Enforcement (ICE).

June 13: The Health Care Authority (HCA) is required by federal law to submit certain data to the Centers for Medicare & Medicaid Services (CMS) for all individuals enrolled in Apple Health (Medicaid). HCA is required to do this in order to continue to receive federal Medicaid funding for our program. For some of our state-only funded health programs, HCA has been able to receive some federal funding to administer these programs. This includes the Apple Health Expansion program created in July of last year. HCA had been submitting required data to CMS in relation to these programs since August 2024. HCA was not consulted by CMS about the sharing of this information with other federal agencies, including those involved in immigration enforcement, and we were not given an opportunity to review or object.

The data that was turned over to the Department of Homeland Security includes protected health information of every Apple Health enrollee. For our state, that’s 1.7 million people. Washingtonians who receive a wide spectrum of services in every corner of our state. This is an unethical use of protected health information. There is a reason why we have clear federal and state laws protecting the transmission and use of health information. Anyone seeking health services are in a vulnerable state and their access deserves to be protected. We would never support the use of data submitted for health care purposes being repurposed by federal agencies seeking to unjustly target specific groups of individuals. Protecting the privacy of all of our Apple Health clients, regardless of their immigration status, is central to our mission, and we take these concerns extremely seriously.

More information

Our Apple Health data privacy document provides detailed information for Apple Health (Medicaid) clients, partners, and community-based organizations. We encourage all interested parties to read the full document.