Privacy Act of 1974; Matching Program
HHS/CMS re-establishes a Privacy Act matching program, likely involving cross-agency data sharing for benefits or compliance. This may affect businesses handling Medicare/Medicaid data or acting as data brokers for health information.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 7, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated Low urgency. Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants that process or share health data with HHS/CMS programs. should confirm how it applies to their specific situation before acting. There is a time constraint attached: No immediate deadline; monitor for further guidance from HHS.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
Re-establishment of a matching program under the Privacy Act, which may expand data sharing between HHS and other agencies, potentially increasing compliance obligations for data minimization and consent.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants that process or share health data with HHS/CMS programs.
What you must do
Review if your business participates in any HHS matching programs or shares data with CMS; update privacy notices and data-sharing agreements accordingly.
Deadline
No immediate deadline; monitor for further guidance from HHS.
Source: https://www.federalregister.gov/documents/2026/07/07/2026-13671/privacy-act-of-1974-matching-program
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- Client Alert: California Invasion of Privacy Act Reform Gains Momentum: Legislature Advances Bill That Could Significantly Curtail Website Tracking Litigation - JD Supra
- Privacy Act of 1974; System of Records
- Louisiana Enacts Comprehensive Consumer Privacy Law - Hunton Andrews Kurth LLP
- Social Media Privacy Laws Take Effect Tuesday: Teen Ad Ban and Portability Rights - Tech Times
- Vermont Data Privacy Bill Signed into Law - Inside Privacy