- Introduction
- Background
- Current State of Affairs
- The Judge’s Reasoning
- The Policy and HIPAA
- The Policy Behind It
Introduction
In recent developments, U.S. Immigration and Customs Enforcement (ICE) has been granted limited access to Medicaid data to aid in deportation efforts. This policy shift, stemming from a federal court ruling, allows the sharing of basic personal information about Medicaid enrollees with immigration authorities. While proponents argue it enhances enforcement of immigration laws, critics fear it could discourage vulnerable populations from seeking necessary healthcare. This article explores the background of this issue, the current state of affairs as of January 2026, and the underlying policies driving these changes. For more on ICE’s role in immigration enforcement, see our detailed overview on ICE immigration detention transfer procedures.
Background
The intersection of healthcare data and immigration enforcement has long been a contentious area in U.S. policy. Medicaid, a joint federal-state program providing health coverage to low-income individuals, has expanded in recent years to include certain undocumented immigrants in select states. For instance, states like California have extended Medicaid eligibility to undocumented residents, aiming to improve public health outcomes and reduce uncompensated care costs for hospitals.1 (For insights into how public benefits like Medicaid factor into immigration decisions, refer to our article on overview of public charge.)
The push for data sharing between the Department of Health and Human Services (HHS), which oversees Medicaid through the Centers for Medicare & Medicaid Services (CMS), and the Department of Homeland Security (DHS), which includes ICE, intensified under the Trump administration starting in 2025. In July 2025, reports emerged of an interagency agreement granting ICE access to data on approximately 79 million Medicaid recipients.2 This agreement was designed to allow ICE to verify immigration status and locate individuals for enforcement actions, particularly those without legal status who might be using public benefits. (See our discussion on deportability on public charge grounds for related deportation implications.)
However, this move sparked immediate backlash. In August 2025, a coalition of 22 Democratic-led states, including California, filed a lawsuit to block the data sharing, arguing it violated privacy protections and could lead to the misuse of sensitive information.3 A federal judge issued a preliminary injunction in August 2025, temporarily halting HHS from sharing Medicaid records with DHS and ordering ICE to cease using any data already obtained.4 The injunction was based on concerns over potential violations of the Health Insurance Portability and Accountability Act (HIPAA) and the broader implications for public health.
The lawsuit highlighted a broader debate: balancing immigration enforcement with access to essential services. Advocates pointed out that many Medicaid enrollees in these programs are mixed-status families, where U.S. citizen children or legal residents rely on the coverage, but fear of deportation could deter enrollment. (For more on deportation defenses in such scenarios, explore our section on removal & deportation defense.)
Current State of Affairs
As of January 2026, the landscape has shifted following a key federal court decision. On December 29, 2025, U.S. District Judge Vince Chhabria in California ruled that HHS could resume sharing limited Medicaid data with ICE, rejecting the states’ bid for a permanent block.5 The ruling specifies that only basic biographical and contact information—such as immigration status, address, phone number, date of birth, and Medicaid ID—can be shared. Critically, no medical or health-related data is included, addressing some privacy concerns raised in the lawsuit.6
This access became effective starting the week of January 5, 2026, allowing ICE to use the data in deportation cases.7 According to HHS, the sharing is authorized under existing interagency agreements obtained through Freedom of Information Act (FOIA) requests, which detail the scope of data exchange between CMS and DHS.8 While the lawsuit continues, the current injunction limits the data to non-sensitive details, and HHS is prohibited from providing detailed medical information.9 (Learn about ICE’s enforcement priorities in our article on ICE interim enforcement priorities (Feb. 18, 2021 Memorandum), which provides context on evolving policies.)
Public reaction has been polarized. Supporters, including some conservative voices on social media, view this as a victory for immigration enforcement, enabling ICE to target individuals allegedly exploiting public resources.10 Conversely, immigrant rights groups and Democratic officials express alarm, warning that it could create a “chilling effect” where people avoid medical care due to deportation fears.11 In California, where undocumented immigrants can access state-funded Medi-Cal, enrollment decisions are now complicated by these risks.12 (For related concerns during crises, see our piece on public charge and the coronavirus (COVID-19).)
As of now, the policy affects states offering Medicaid to undocumented individuals, with ICE potentially using the data to locate and prioritize deportations. However, the ongoing litigation could lead to further restrictions or appeals.
The Judge’s Reasoning
In his December 29, 2025, ruling in the case State of California v. U.S. Department of Health and Human Services, Judge Vince Chhabria provided detailed reasoning for allowing limited data sharing while maintaining restrictions on broader access.13 Chhabria determined that the Trump administration’s policy permitting ICE to obtain basic biographical, location, and contact information from Medicaid data is authorized by law. He emphasized that this aligns with DHS’s broad statutory authority to pursue law enforcement objectives, and federal agencies are required to comply with legitimate data requests from one another. The judge found that HHS and DHS had adequately explained their decisions regarding this basic information, which forms the core of the new policies.
However, Chhabria blocked the sharing of any additional information beyond these specified categories. He criticized the policies for lacking clarity, stating: “The new policies are totally unclear about what that information would be, why it would be needed for immigration enforcement purposes, and what the risks of sharing it with DHS would be.”14 He further noted that “Beyond the basic information discussed above, the policies are totally unclear and do not appear to be the product of a coherent decision-making process,” and that the government “failed to provide satisfactory answers to these and other questions based on the contemporaneous record.”15 This lack of justification led him to conclude that expanding beyond basic data would be arbitrary and capricious under administrative law standards.
Chhabria also addressed the plaintiffs’ claims of statutory violations, rejecting arguments that the policy contravenes the Health Insurance Portability and Accountability Act (HIPAA), the Privacy Act, the Affordable Care Act (ACA), and the Social Security Act. He reasoned that these laws do not prohibit ICE from obtaining basic data on individuals unlawfully present in the country, particularly when such data is severable from sensitive medical records or information about U.S. citizens.16 The modified preliminary injunction reflects this balance, permitting sharing of citizenship and immigration status, address, phone number, date of birth, and Medicaid ID for non-citizens, provided it is not intertwined with prohibited data.
This reasoning underscores a judicial effort to uphold interagency cooperation for enforcement while safeguarding against overreach that could undermine public health or privacy without sufficient rationale. Critics of the ruling argue it still risks deterring healthcare access, while supporters see it as a measured endorsement of immigration priorities.
The Policy and HIPAA
The policy’s compatibility with HIPAA has been a central point of contention, and Judge Chhabria’s ruling provides clarity on this issue. HIPAA primarily protects the privacy and security of individuals’ health information, prohibiting unauthorized disclosures by covered entities like CMS. However, the law includes exceptions for certain law enforcement purposes, provided the disclosure is limited to the minimum necessary information.17
In this case, Chhabria ruled that sharing basic non-medical data—such as contact details and immigration status—does not violate HIPAA because it falls outside the scope of protected health information (PHI) or qualifies under permissible disclosures for public interest and law enforcement.18 He noted that the data in question is severable from actual medical records, ensuring no sensitive health details are shared. This interpretation allows HHS to comply with DHS requests without breaching HIPAA’s core protections.
Critics, including the plaintiff states, argued that even limited sharing could indirectly reveal health-related information or create a chilling effect, deterring enrollment and thus conflicting with HIPAA’s intent to promote access to care. However, the judge dismissed these broader concerns, focusing on the statutory text which does not explicitly bar such interagency exchanges for immigration enforcement. The ruling prohibits any medical data sharing, reinforcing HIPAA safeguards, but permits basic identifiers, viewing them as administrative rather than health data.19
Overall, the policy sits uneasily with HIPAA’s privacy ethos for some advocates, potentially eroding trust in healthcare systems among immigrant communities. Yet, legally, it aligns with exceptions allowing disclosures for lawful governmental functions, as long as they remain narrowly tailored. For immigrants navigating these changes, consulting legal counsel is advisable to understand impacts on benefits and status. (See our guide on HIPAA and immigration: privacy considerations for more details.)
The Policy Behind It
The underlying policy rationale ties into long-standing U.S. immigration principles, particularly the “public charge” rule, which deems individuals inadmissible or deportable if they are likely to become dependent on government assistance. Revived and strengthened under the Trump administration, this rule aims to ensure immigrants are self-sufficient and not a burden on taxpayers.20
Data sharing between agencies is facilitated by federal laws like the Immigration and Nationality Act, which allows for information exchange to enforce immigration status. The specific agreement between HHS and DHS, revealed through FOIA, emphasizes fraud detection and eligibility verification but has been leveraged for broader enforcement.21 Proponents argue that undocumented immigrants should not access taxpayer-funded benefits, and using Medicaid data helps identify violations efficiently.
Critics, however, contend this erodes privacy protections under HIPAA and conflicts with public health goals. The Biden-era expansions of Medicaid were intended to cover gaps in coverage, but the current administration’s focus on mass deportations has reprioritized enforcement.22 Broader policy debates include the ethics of using health data for non-health purposes and the potential for deterring legal residents from programs.
In summary, this development reflects a tension between immigration control and humanitarian concerns. As enforcement ramps up, monitoring the real-world impacts on healthcare access and immigrant communities will be crucial.
- Health Care Coverage (Maps) – NILC, Published: Jul 28, 2025
- [PDF] united states district court – California Department of Justice, Published: Aug 12, 2025.
- Federal Court Blocks Trump Administration’s Attempt to Use … – Published: Aug 13, 2025.
- Federal Judge Blocks HHS from Sharing Medicaid Data with ICE – Published: Aug 18, 2025
- Judge allows HHS to share basic info with ICE for immigration … – Published: Dec 29, 2025
- Judge rules basic Medicaid data can be shared with ICE – NBC News – Published: Dec 30, 2025.
- After judge’s ruling, HHS authorized to resume sharing some … – Published: 2 days ago.
- Improper Sharing of Medicaid Data with ICE (California v. U.S. …
- ICE can access some Medicaid information for deportation efforts … – Published: Dec 30, 2025
- ICE can use Medicaid data to find people without legal status for … – Published: 3 days ago.
- Ibid.
- Medical Assistance Programs for Immigrants in Various States (Table) – Published: Jul 29, 2025.
- Judge allows HHS to share basic info with ICE for immigration enforcement – Published: Dec 29, 2025.
- Ibid..
- Trump admin can share immigrants’ Medicaid data with ICE, judge rules – Published: Dec 29, 2025.
- Ibid…
- Know Your Rights: Health Care Providers & Immigration Enforcement – Published: Jan 24, 2025.
- Judge allows HHS to share basic info with ICE for immigration … – Published: Dec 29, 2025.
- HIPAA shields patient data from ICE; train staff on ground rules … – Published: Dec 3, 2025.
- Explainer: 2025 Proposed Rule on Public Charge – Published: Dec 8, 2025.
- Trump’s HHS Orders State Medicaid Programs To Help Find … – Published: Nov 3, 2025.
- Public Charge: What Advocates Need to Know About the November … – Published: Nov 18, 2025


