You handed over your medical records to a doctor, trusting that they’d stay private. That trust was a transaction you didn’t consent to — and the currency was your safety.
Last week, NPR revealed that ICE obtained Medicaid data it wasn’t supposed to have — and shared it with Palantir, the data analytics company known for building predictive policing tools. The ‘fix’? Someone deleted the Microsoft Teams chat where the data was shared. Yes, that’s considered a remediation.
Deleting a chat message doesn’t delete the data. It deletes the evidence of the leak.
This isn’t a bug. It’s a feature. The privatization of surveillance means that data, once ingested by a company like Palantir, is permanently integrated into algorithmic profiling systems. You can’t unring a bell. You can’t unsee a medical record.
This is dangerous. This is a betrayal of every patient who believed in the sanctity of the doctor-patient relationship. And it’s happening because HIPAA is structurally powerless against the very government agencies and corporate partners meant to uphold it.
You’ve probably noticed that every time you sign a HIPAA form, nothing actually happens. You’re told your data is protected, but you see news like this and realize: the protection is a fiction.
As one commenter on the NPR story put it, ‘HIPAA privacy laws are rarely enforced against corporations and government. These laws are meant to suppress whoever they want to.’
The irony is that the same government agencies that demand your data for public health are now using it for immigration enforcement. The pandemic-era infrastructure that collected your COVID test results? It never went away. It just got a new job.
Your medical data is not a secret. It’s a resource. And as long as private companies like Palantir have access, you are not a patient — you are a data point in a surveillance machine.
FAQ
Q: Isn't this just a one-time mistake by a few employees?
A: No. The pattern is clear: government agencies repeatedly use private contractors to bypass regulations. This wasn't a slip-up; it's a structural loophole that allows data to flow from health systems to law enforcement without oversight.
Q: What can I do to protect my health data?
A: Realistically, very little. You can opt out of sharing data where possible, but the system is designed to capture it. The only real solution is systemic accountability: demand that Congress enforce HIPAA, ban the sale of health data to third parties, and require audits for any government access.
Q: Maybe sharing data with ICE helps catch criminals or terrorists?
A: That's the argument, but it's a slippery slope. Health data is uniquely sensitive. If we allow it to be used for any purpose beyond direct care, we destroy the trust that makes public health possible. People will avoid seeking treatment if they fear their data will be used against them. The cure is worse than the disease.