US healthcare marketplaces shared citizenship and race data with ad tech giants

Scope of Data Sharing and Tracking Pixels

• State-run health exchanges embedded Meta/TikTok pixels to measure campaigns and retarget visitors to boost enrollment.
• Critics argue public services shouldn’t depend on ad-tech tracking, especially for sensitive services like healthcare.
• Others note many site operators (including governments) adopt such tools naively, treating them like basic analytics and not fully grasping third-party access.

HIPAA, Legality, and Covered Entities

• Debate over whether this is a HIPAA violation:
  • One side: HIPAA covers health data and could apply if data can be tied to health conditions or outcomes.
  • Other side: HIPAA only binds “covered entities” and their business associates; ad-tech firms are outside its scope unless formally contracted.
• Disagreement on HIPAA’s original purpose: portability vs. privacy; some say privacy rules were secondary add-ons, others say privacy was always part of the intent.
• Some see HIPAA as largely a tool for liability and leverage, with weak real-world privacy protections.

Government vs Corporate Responsibility

• Some blame “corporate overlords”; others stress that state governments themselves chose to embed trackers (“call is coming from inside the house”).
• Dispute over whether government incentives are aligned with the public or just another power center subject to greed, poor oversight, and abuse.

Consent, Contracts, and Regulation Proposals

• Many call for bans or strict limits: illegal to send, receive, or even possess such datasets; strong opt-in for each data point and each sharing step.
• Frustration with opaque “consent” flows and enormous unread contracts; examples of other countries limiting fine print.
• Cookie banners are seen by some as necessary consent, by others as pointless theater.

Race and Citizenship Data

• Strong discomfort that marketplaces ask and share race and citizenship data at all.
• US context: race is self-declared using census categories; ethnicity (e.g., Hispanic/Latino) is asked separately.
• Justifications mentioned: monitoring discrimination and accounting for race-linked health risks; opponents argue this still enables government-level racial discrimination.
• Some suggest a legal right to misreport race to poison datasets; others note falsifying official forms may be treated as a crime, though “what counts as lying” is contested.

Broader Privacy, Politics, and Healthcare Cynicism

• View that major tech fortunes rest on surveillance advertising and behavioral manipulation.
• Many see US institutions as captured by corporate interests (e.g., post–Citizens United), making strong privacy laws unlikely.
• Anecdote of a state marketplace experience devolving into mass spam calls reinforces distrust.
• Overall tone: deep pessimism about US healthcare, data privacy, and the political will to fix either.