Virginia, DC pause health marketplace tracking after data-sharing report
Virginia and D.C. stopped marketplace data sharing after trackers exposed sensitive health details, including information tied to citizenship and race, to ad-tech firms.
Virginia and Washington, D.C., paused health marketplace data collection and sharing after questions arose over how much information their insurance exchange websites were passing to advertisers and ad-tech firms. The breach of expectation is stark: people shopping for coverage on public-facing health systems likely did not realize that sensitive indicators tied to citizenship and race could move beyond enrollment screens.
The exchanges sit inside the Affordable Care Act system, which was built to help people compare and enroll in coverage. To do that, they collect detailed information, including health-history data used to match applicants with plans. Investigators found that nearly all of the 20 state-run health insurance exchanges in the United States had added advertising trackers that sent user activity back to big tech companies, and in some cases the trackers carried more data than state officials understood.
In the District, DC Health Link was established by the District of Columbia Health Benefit Exchange Authority to develop and operate the ACA online marketplace for District residents and small businesses. Virginia’s Insurance Marketplace describes itself as the Commonwealth’s official health insurance marketplace, and its privacy policy says it takes reasonable steps to protect personally identifiable information while citing federal ACA privacy rules at 45 C.F.R. § 155.260. The pause in both places shows how thin the line can be between enrollment infrastructure and data leakage when third-party analytics tools are embedded in government sites.
The concern extends well beyond Virginia and the District. In 2025, state marketplace sites in Nevada, Maine, Massachusetts and Rhode Island were found sharing sensitive health data with companies such as Google and LinkedIn, and later reporting identified four more states with similar practices. Some of those websites transmitted prescription drug names and dosages, making the privacy stakes far more intimate than routine web tracking.
The controversy lands as marketplace enrollment remains large and politically consequential. KFF said ACA Marketplace enrollment reached a record 24.3 million people in 2025, and it continues to track enrollment closely for 2026. KFF also compiles Marketplace plan selections by race and ethnicity in HealthCare.gov states using self-reported and imputed data, underscoring that these systems already handle demographic information central to public policy. The latest disclosures are likely to sharpen scrutiny of whether exchanges should use advertising and analytics tools at all when they are entrusted with some of the most sensitive personal data in state government.
Sources:
Know something we missed? Have a correction or additional information?
Submit a Tip
