Overview

• Investigative reports by The Markup and CalMatters found that Nevada, Maine, Massachusetts and Rhode Island health exchanges transmitted users’ prescription drug names and other sensitive health information to Google, LinkedIn and other tech firms.
• Covered California removed advertising trackers and launched an internal review in April after its exchange was found sharing personal health details with LinkedIn.
• Several other state marketplaces have disabled data-collection tools following inquiries from reporters and advocacy groups.
• Class-action lawsuits and federal lawmaker inquiries are targeting exchanges and partner hospitals over potential HIPAA and privacy regulation violations.
• Privacy experts warn that using advertising trackers on healthcare websites risks exposing sensitive information when not subject to strict HIPAA safeguards.