HealthCare.gov Sends Personal Data to Dozens of Tracking Websites
The Associated Press reports that healthcare.gov-the flagship site of the Affordable Care Act, where millions of Americans have signed up to receive health care-is quietly sending personal health information to a number of third party websites.
Context & Ripple Effects
The Associated Press found that HealthCare.gov — the flagship enrollment site for [[a:entity|the Affordable Care Act]] — was quietly passing personal health data to dozens of third-party trackers, and within days the agency moved to limit what it shared (changes to HealthCare.gov now restrict personal data shared with tracking websites). The disclosure landed in a broader pattern already visible that month: a survey of health sites showed the majority sending medical-search data to third-party companies (most health sites leak medical searches to third parties).
First-order effects
- Millions of ACA enrollees had their personal health information flowing to dozens of trackers without consent; the immediate fix limits what HealthCare.gov sends and cuts off that exposure at the source.
Second-order effects
- The episode pressures other government and health sites to audit their own tracker integrations — a concern the 2025 investigation into Nevada, Maine, Massachusetts, and Rhode Island exchanges sharing data with Google, LinkedIn, and Snap (state exchanges still share sensitive data via web trackers) shows remained unresolved a decade later.
Third-order effects
- Health data flowing through government web infrastructure becomes a recurring security liability: three years later a system interacting with HealthCare.gov was breached, exposing sensitive data for roughly 75,000 people (hacked system tied to HealthCare.gov exposed ~75,000 people's data) — pointing toward structural requirements for data-minimization and tracking bans on public benefits sites.
The trend: Government and health websites are being forced to treat third-party trackers as a privacy and security boundary problem rather than an analytics convenience.