— The California Department of Health Care Services (DHCS) is firmly committed to protecting the privacy and well-being of all Medi-Cal members. Recent reports have raised serious concerns about how federal agencies are using Medicaid data, including the personal data of all 15 million Californians covered by Medi-Cal. We want to clarify what we know.
In June 2025, DHCS became aware of reports that the federal Centers for Medicare & Medicaid Services (CMS) may have shared the personal data of Medi-Cal members with the U.S. Department of Homeland Security. Upon learning of these reports, DHCS reached out to CMS to confirm whether this occurred, what data was shared, to which agencies, and why.
In late July 2025, DHCS was informed that CMS signed an agreement with the Department of Homeland Security that allowed Immigration and Customs Enforcement (ICE) to access Medicaid member information, including name, address, and other personal information. The agreement provided ICE with access to the data from July 9, 2025, through September 9, 2026. The acting ICE Director publicly confirmed that ICE planned to use this information to locate immigrants who may be subject to deportation. ICE did not provide specific details on how it may access the data.
Additionally, on August 12, a federal court issued a preliminary injunction blocking the Department of Homeland Security from using California's Medicaid data for immigration enforcement and preventing the U.S. Department of Health and Human Services from sharing that data for this purpose. California is part of the
multistate lawsuit that led to this injunction, which will remain in effect until the agencies complete a reasoned decision-making process or the case concludes. As such, although the court has temporarily stopped (preliminary enjoined) the federal government from using Medicaid data obtained from California for immigration enforcement, that may change in the future.
As required by federal law, DHCS submits monthly reports to CMS through the Transformed Medicaid Statistical Information System (T-MSIS). These reports include demographic and eligibility information, such as name, address, date of birth, Medicaid ID, Social Security Number (if provided), and broad immigration status, for every Medi-Cal member. Data submitted to CMS, including through T-MSIS, is considered sensitive and confidential. CMS is legally required to protect the confidentiality and security of Medicaid data. To be clear: DHCS has not provided CMS with any additional or new demographic information beyond what is routinely reported per federal requirements. DHCS takes any misuse of Medi-Cal data seriously. Any unauthorized use or disclosure is potentially unlawful and is a grave breach of trust, especially with immigrant families.
Cancelling Medi-Cal coverage today does not erase the information that was already sent to immigration enforcement. For individuals concerned about how the federal government may use their personal information for immigration reasons:
- There are qualified organizations that provide immigration-related legal services:
- Information about mental health resources is available on the Immigration and California Families webpage.
- For information about your legal rights if you encounter immigration agents, there are fact sheets here in English and here in Spanish, with additional translations in development.
- If you are comfortable, you may contact your local embassy or consulate for legal assistance or guidance.
We are committed to transparency, privacy, and ensuring that all Californians, regardless of immigration status, feel safe accessing the care they need. We will continue to engage with community partners, share updates, and defend the rights and privacy of all Medi-Cal members.
UPDATED SEPTEMBER 5, 2025