US Health Marketplaces Caught Sharing Patient Data With Ad Firms

Health insurance marketplaces in Virginia and Washington D.C. have halted data collection after an investigation revealed they were sharing sensitive user information including citizenship status and race with advertising technology companies. The discovery raises serious privacy concerns about how personal health data is being monetized.

A Bloomberg investigation has uncovered a troubling practice at state and local health insurance marketplaces in the United States: sharing customers' sensitive personal information with advertising technology firms. Virginia and Washington D.C. have both paused their data collection and sharing operations in response to the findings.

The investigation revealed that these health insurance platforms were transmitting detailed user data to ad tech companies, including citizenship status, race, and other demographic information. This practice raises significant privacy questions about how personal health information-which is typically considered among the most sensitive data-is being handed over to third parties without explicit user consent.

Following Bloomberg's reporting, Virginia and Washington D.C. took immediate action to suspend the data collection practices. The pause represents an acknowledgment of the privacy risks involved in sharing such detailed personal information with commercial advertising networks. Health insurance marketplaces serve millions of Americans seeking coverage, and the platforms had access to intimate details about users' backgrounds and circumstances.

This incident highlights a broader pattern in the tech industry where user data is being monetized by intermediaries. Ad tech companies use demographic information like race and citizenship status to build detailed user profiles for targeted advertising campaigns. The case demonstrates how health-related platforms, which users reasonably expect to maintain strict privacy standards, may still be sharing data with commercial partners.

The situation underscores growing concerns about data privacy practices among government-run digital services and the need for stronger protections when sensitive personal information is involved. Advocacy groups and privacy experts are likely to increase pressure on other health marketplaces to audit their own data-sharing practices.