OPM Medical Data Proposal Updates
A growing number of lawmakers are urging the Office of Personnel Management (OPM) to fully withdraw its proposal to collect detailed medical data from federal health plans. Sixteen senators, alongside House Oversight Committee members, have taken the unusual step of demanding a complete halt—not revisions or added safeguards. Their concern is direct: the proposal may lack legal authority and could conflict with fundamental privacy protections under HIPAA.
For federal employees, this level of congressional intervention signals that the issue is not routine policy refinement. It reflects serious legal and structural concerns about how sensitive health information could be gathered and used.
What the Proposal Actually Does
The proposal would require all Federal Employees Health Benefits (FEHB) and Postal Service Health Benefits carriers to submit monthly, claims-level data covering more than 8 million individuals. This includes medical visits, prescriptions, and treatment records. Critically, the notice does not require removal of personally identifiable information.
That distinction matters. Agencies commonly analyze de-identified data for cost and program oversight. What is atypical—and legally sensitive—is the centralized collection of identifiable medical records without clearly defined access limits, use restrictions, or internal controls.
How This Could Affect Employment Decisions
Lawmakers and union leaders have highlighted a key risk: once identifiable data exists in a centralized system, it may be used beyond its stated purpose. The senators’ letter specifically raised concerns about its potential use in hiring, suitability determinations, reductions in force (RIFs), disability accommodations, and performance management.
This is not hypothetical. Federal employment decisions already involve assessments of reliability, attendance, and medical ability in certain contexts. Introducing detailed medical histories into that ecosystem—without clear statutory authority—creates legal exposure for agencies and uncertainty for employees.
From a practical standpoint, federal employees should understand that the issue is not just privacy in the abstract. It is how data, once collected, can shape decisions about careers.
The Security and Trust Problem
There is also a credibility issue. OPM’s history includes a major 2015 data breach affecting approximately 22 million records. More recent concerns about handling sensitive information have only heightened scrutiny.
When an agency proposes collecting highly sensitive medical data, courts and Congress often look not only at the legal authority—but also at the agency’s demonstrated ability to safeguard that data. That context is shaping the current pushback.
Where Things Stand Now
The public comment period has closed, but OPM has not issued a final decision. The proposal remains active. Congressional pressure is increasing, but until OPM formally withdraws or revises the plan, the possibility of implementation remains.
A Grounded Way to Approach This
It is easy to feel a loss of control when policies involve deeply personal information. A more grounded approach is to stay informed without assuming outcomes. The legal process here—public comments, congressional oversight, and potential litigation—exists to test proposals like this.
Awareness is the most immediate tool available. Understanding what is being proposed, how it could be used, and where it stands allows federal employees to respond thoughtfully rather than reactively.
Legal Disclaimer: The information provided in this article is for informational purposes only and should not be construed as legal advice. While I am a federal employment attorney, this post does not create an attorney-client relationship. Every situation is unique, and legal outcomes depend on specific facts and circumstances.