20131101

Problem ID: 8014066264639015270
Entered by: Ben Simo
Is there a problem here?  

Healthcare.gov stores the minimum amount of data?



I would tell you we are storing the minimum amount of data, because we think that's very important. The hub is not a data collector. It is actually using data centers at the IRS, at Homeland Security, at Social Security to verify information, but it stores none of that data, so we don't want to be... -- HHS Secretary Kathleen Sebelius


I have heard some say that Healthcare.gov doesn't contain much personal information. Let's take a look.

The list below contains some of the data items that Healthcare.gov returns to the browser each time a user logs into the system and views their application.

As I haven't yet successfully completed an application due to other issues with the system, I don't know if all of these get populated. The items I have been able to successfully enter into a form and submit do get returned the next time I login.

While a user must login to access this data, this list does give us a hint as to what kind of data might be available to someone who manages to access another's account without authorization.



  • absentParentAgreementIndicator
  • absentParentIndicator
  • absentParentName
  • action
  • addressPlace
  • ageLeftFosterCareCode
  • allocatedAPTCAmount
  • amountIRSAnnualIncome
  • amountSocialSecurityBenefitsIncome
  • amountStateQuarterlyIncome
  • amountStateUnemploymentIncome
  • answerText
  • applBirthDate
  • applCityName
  • applEmailAddress
  • applFirstName
  • applFullNumberCode
  • applicantAge
  • applicantPersonInfo
  • applicationFamilyGroupTypeCode
  • applicationFamilyGroupTypeName
  • applicationMember
  • applicationMemberAnnualTaxIncome
  • applicationMemberAssociation
  • applicationMemberAssociationDate
  • applicationMemberAssociationEndDate
  • applicationMemberAssociationReasonTypeCode
  • applicationMemberAssociationReasonTypeName
  • applicationMemberAssociationStartDate
  • applicationMemberCurrentYearTaxFiler
  • applicationMemberCurrentYearTaxFilerTypeCode
  • applicationMemberCurrentYearTaxFilerTypeName
  • applicationMemberEmployeeTypeCode
  • applicationMemberEmployeeTypeName
  • applicationMemberEmployerIdentifier
  • applicationMemberFamilyTypeCode
  • applicationMemberFamilyTypeName
  • applicationMemberIdentifier
  • applicationMemberIndianStatusDate
  • applicationMemberSubscriberTypeCode
  • applicationMemberSubscriberTypeName
  • applicationMemberTaxFiler
  • applicationMemberTaxFilerTypeCode
  • applicationMemberTaxFilerTypeName
  • applicationSignature
  • applLastName
  • applMiddleName
  • applPersonIdentifier
  • applSsnNumber
  • applStateCode
  • applStreetName1
  • applStreetName2
  • applSuffix
  • applZipPlus4Code
  • aptcAttestationIndicator
  • aptcAttestationSignatureText
  • aptcReferralIndicator
  • areaNumber
  • assistorOrganizationIdentifier
  • attestedAnnualIncome
  • attestedApplicationMemberEstimatedIncome
  • attestedApplyingForCoverageIndicator
  • attestedCaretakerID
  • attestedCaretakerIndicator
  • attestedChildOfCaretakerIndicator
  • attestedImmigrationStatusIndicator
  • attestedIRSAnnualIncome
  • attestedIRSAnnualIncomeIndicator
  • attestedMonthlyIncome
  • attestedSocialSecurityBenefitsIncome
  • attestedStateQuarterlyIncomeIndicator
  • attestedStateUnemploymentIncome
  • authorizedRep
  • authorizedRepAllIndicator
  • authorizedRepReceiveNoticeIndicator
  • authorizedRepresentativeIndicator
  • authorizedRepresentativePrivilegeTypeName
  • authorizedRepSignatureIndicator
  • avgHoursPerWeek
  • babyDueQuantity
  • babyOrAdoptedInHouseholdIndicator
  • birthDate
  • blindDisabledIndicator
  • blindnessIndicator
  • calculatedAnnualIncomeVerificationIndicator
  • cardName
  • caretakerRelativeIndicator
  • changeFilingStatusPrompt
  • changeInformationAgreementIndicator
  • childApplicationMember
  • childLivesWithBothParents
  • childOfCaretakerRelativeIsEnrolledIndicator
  • childOfVeteranIndicator
  • citizenshipDocumentAlternateName
  • citizenshipStatusIndicator
  • cityName
  • claimingTaxFilerCategoryTypeCode
  • claimingTaxFilerCategoryTypeName
  • claimingTaxFilerNotApplicationMemberAssociationReasonCode
  • claimingTaxFilerNotApplicationMemberIndicator
  • claimsDependentsIndicator
  • completeImmigrationInformation
  • concurrencyHash
  • contactIndicator
  • countryCode
  • countyFipsCode
  • countyName
  • coverageEndDate
  • coverageEndedIndicator
  • coverageInDifferentStateIndicator
  • coverageStartDate
  • coverageYearAnnualIncomeExpectedToChangeIndicator
  • coverageYearDependentIndicator
  • coverageYearNumber
  • coverageYearTaxHousehold
  • coveringInsuranceProductTypeAttestation
  • creatingExchangeUser
  • creationDatetime
  • csrf
  • currentDate
  • currentYearTaxHouseholdIdentifier
  • custodialClaimingTaxFilerIndicator
  • custodialParentClaimingTaxFilerIndicator
  • dateGainedEligibleImmigrationStatus
  • dateLostCoverage
  • dateMarried
  • dateMoved
  • dateOfAdoption
  • dateProspectiveLostCoverage
  • dateReleasedFromIncarceration
  • deceasedIndicator
  • definedPersonEthnicity
  • definingApplicationMemberContactMethod
  • definingCircumstanceChangeAttestation
  • definingContactMethodTypeCode
  • definingContactMethodTypeName
  • definingInsuranceApplicationOriginTypeCode
  • definingInsuranceApplicationOriginTypeName
  • definingMemberMaritalStatusTypeCode
  • definingMemberMaritalStatusTypeName
  • definingMemberMedicaidAnchorTypeCode
  • definingMemberMedicaidAnchorTypeName
  • dependentFilerStateMatch
  • dependentIndicator
  • deprivedChildIndicator
  • dhsNextStep
  • discrepantMonthlyIncomeIndicator
  • doNotKnowIncomeIndicator
  • durationOfMembershipHSM
  • edsCalled
  • eeAcountUsername
  • effectiveDate
  • electronicNoticeIndicator
  • elephoneCountryName
  • eligibilityResultsNoticeUrl
  • eligibleESIRetirementCobraParentIndicator
  • eligibleImmigrationStatusIndicator
  • eligibleITUIndicator
  • eligibleNewPlansIndicator
  • emailAddressFullText
  • emailAddressIdentifier
  • emailAddressName
  • employerInsurance
  • employmentAuthorizationCategoryIdentifier
  • enrolledCoverageIndicator
  • enrollmentGroups
  • enrollmentPeriodReason
  • ethnicityTypeCode
  • exchangeState
  • exchangeUserIdentifier
  • exitExpeditedIncomeIndicator
  • expectedDeliveryDate
  • extensionNumber
  • fatherAvgHoursWeek
  • federalIndianStatusCode
  • federalIndianStatusName
  • financialAssistanceIndicator
  • firstName
  • fixedAddressIndicator
  • forwardingPhysicalDocument
  • fosterCareEndedBecauseOfAge
  • fosterCareIndicator
  • fosterCareStateCode
  • fromBatch
  • ftiUsedIndicator
  • fullTelephoneNumberCode
  • futureDependents
  • genderTypeCode
  • goodCauseExemptionIndicator
  • goodCauseExemptionText
  • greaterThanFPLIndicator
  • hadMedicaidDuringFosterCareIndicator
  • hash
  • hasSpouseIndicator
  • hasTaxFilingRequirementIndicator
  • healthcareSharingMinistryActiveEndDate
  • healthcareSharingMinistryActiveStartDate
  • healthcareSharingMinistryCity
  • healthcareSharingMinistryCongregation
  • healthcareSharingMinistryCounty
  • healthcareSharingMinistryDistrict
  • healthcareSharingMinistryExistIndicator
  • healthcareSharingMinistryName
  • healthcareSharingMinistryState
  • healthcareSharingMinistryZip
  • helpingApplicationAssisterTypeCode
  • helpingApplicationAssisterTypeName
  • helpingApplicationAssistor
  • hispanicOriginIndicator
  • hubResponded
  • hubTransferAckRequestID
  • hubTransferAckStatusCode
  • hubTransferTimeStamp
  • id
  • identifier
  • idProofed
  • idsCalledCounter
  • immigrationVerificationComplete
  • impactingMedicaidCHIPIncomeMemberIdentifier
  • incarcerationEndDate
  • incarcerationStartDate
  • incarcerationStatusIndicator
  • incarcerationType
  • incomeSubjectToFederalRestrictions
  • indianStatusEvidenceDocument
  • institutionalizedIndicator
  • insuranceApplicationTypeCode
  • insuranceProductTypeCode
  • insuranceProductTypeName
  • insuredIndicator
  • isDentalPlanPreferred
  • isEnrolled
  • isIncarcerated
  • isMarriedIndicator
  • isMultiTaxHouseholdIndicator
  • issuingCountryCode
  • issuingCountryName
  • knownPersonWorkType
  • largeAssetIndicator
  • lastModifiedBy
  • lastName
  • lastRecordIndicator
  • lawfulPresenceEndDate
  • lawfulPresenceStartDate
  • lawfulPresenceStatusIndicator
  • lineNumber
  • livedInUS5YearIndicator
  • liveOutsideStateTemporarilyIndicator
  • livesWithAdultTaxClaimerIndicator
  • livesWithCustodialParentNotApplicationMemberIndicator
  • livesWithIndcator
  • livesWithMinorAgeDependentIndicator
  • livesWithOtherParentNotClaimerIndicator
  • longTermCareIndicator
  • losingCurrentPlanIndicator
  • marriedFilingJointlyIndicator
  • maxProposedCoverageEffectiveDate
  • medicaidCorrectExchange
  • medicaidDeterminationIndicator
  • medicaidEligibilityDeterminationDate
  • medicaidEligibilityReasonText
  • medicaidHousehold
  • medicaidHouseholdAnchor
  • medicaidRequirementAgreementIndicator
  • medicaidStudentResidencyRulesApplies
  • medicaidTaxRoleTypeCode
  • medicaidUndeterminedFamilyNotProvidedIndicator
  • member
  • memberAssociationRoleTypeCode
  • memberAssociationRoleTypeName
  • memberEmployer
  • memberEmploymentStatus
  • memberEvent
  • memberExemptions
  • memberIndianStatus
  • memberRoleType
  • memberSchoolStatus
  • memberSignatureText
  • memberStatusType
  • memberType
  • messagePlace
  • middleName
  • monthlyIncomeGreaterThanFPLIndicator
  • motherAvgHoursWeek
  • movedFromCountyCode
  • movedFromZipCode
  • nationalProducerNumber
  • needsSeparateApplicationIndicator
  • noAPTCTaxFilerNotProvidedIndicator
  • noFixedAddressIndicator
  • nonCustodialClaimerBothMFSParentsApplyingIndicator
  • noncustodialClaimerNonCustodialApplyingIndicator
  • nonCustodialParentClaimingTaxFilerIndicator
  • nonCustodialParentIndicator
  • nonCustodialParentName
  • nonEmployerSponsoredCoverageIndicator
  • nonESInsurance
  • nonParentProvidesPrimaryCare
  • notChosenPlanIndicator
  • noticeDate
  • number
  • objectIdentifier
  • onlyApplicantIndicator
  • optionStudentResidency
  • organization
  • organizationNomenclatureText
  • otherCoverageWithin6MonthsIndicator
  • otherEthnicityText
  • otherHealthInsuranceIndicator
  • otherRaceText
  • parentApplicationMember
  • parentCaretakerIndicator
  • parentOfStudentLivingInStateIndicator
  • parentWorkQuartersIndicator
  • penaltyOfPerjuryAgreementIndicator
  • peopleTakenCareOf
  • performVerificationIndicator
  • personAddress
  • personAddressCategoryCode
  • personAddressEndDate
  • personAddressRelationshipRoleCode
  • personAddressStartDate
  • personAmericanIndianAlaskanNativeIndicator
  • personCitizenshipStatus
  • personEmail
  • personEmailEndDate
  • personEmailStartDate
  • personEmailVerifiedDateTime
  • personEmailVerifiedIndicator
  • personForWorkQuarterExcludedIndicator
  • personIdentification
  • personIdentificationEffectiveDate
  • personIdentificationEndDate
  • personIdentificationOtherTypeText
  • personIdentificationType
  • personIdentificationTypeCode
  • personIdentificationTypeName
  • personIdentificationUpdateQuantity
  • personIdentificationValueText
  • personIdentifier
  • personIdentityProofingEventSourceTypeCode
  • personIDProofingEvents
  • personIDProofingEventTask
  • personName
  • personRace
  • personRecognizedTribeIndicator
  • personSSN
  • personTelephone
  • personTelephoneCategoryCode
  • personTelephoneEndDate
  • personTelephoneRelationshipRoleCode
  • personTelephoneStartDate
  • personTrackingNumber
  • personTypeCode
  • phoneNumber
  • physicalDocumentTypeCode
  • physicalDocumentTypeName
  • placeRelationshipRoleCode
  • planSelectButtonStatus
  • postalStateCode
  • potentialSeasonalWorkerIndicator
  • pregnancyIndicator
  • preliminaryChildOfCaretakerRelative
  • preliminaryParentCaretakerRelative
  • priorInsuranceEndDate
  • priorTo1956Indicator
  • privacyPolicyAgreementIndicator
  • promptParentAddressCount
  • promptSpouseAddressCount
  • proofingEsdEngagedIndicator
  • proofingEventBarcodeIdentifier
  • proofingEventDate
  • proofingEventRidpSessionIdentifier
  • proofingEventSuccessIndicator
  • proposedCoverageStartDate
  • proposedSEPCoverageEffectiveDate
  • provideAbsentParentInfoIndicator
  • providedInsuranceApplicationSecurityQuestionAnswer
  • provideOtherSSNAgreementIndicator
  • qhpCorrectExchange
  • qualifyPlanSelectIndicator
  • questionAnswerAssignedDateTime
  • receivedCurrentIncomeSourceAttestation
  • receivedIndianHealthServicesIndicator
  • receiveITUIndicator
  • receiveNotificationIndicator
  • recentlyUnemployedIndicator
  • recentlyUnemployedStartDate
  • registerToVoteIndicator
  • relationshipNameText
  • relationshipToTaxFilerTypeCode
  • requestingCoverageIndicator
  • requestingCoverageMemberQuantity
  • requestingDentalCoverageIndicator
  • requestingFinancialAssistanceIndicator
  • residencyEndDate
  • residencyStartDate
  • residencyState
  • residencyStateList
  • residencyStatusIndicator
  • resideTogetherIndicator
  • resideWithCustodialParentExcludedIndicator
  • returnToValidateAnnualIncome
  • reuseTaxDataPermissionIndicator
  • salutationName
  • sameNameIndicator
  • sameSexSpouse
  • saveVerifiableStatus
  • seasonalWorkerIndicator
  • selectedInsuranceApplicationSecurityQuestionTypeCode
  • selectedInsuranceApplicationSecurityQuestionTypeName
  • serviceAreaChangeIndicator
  • sevisIDIndicator
  • signatureDate
  • signatureEmployeeTypeName
  • signatureName
  • signatureTypeCode
  • skipIncomeInfoIndicator
  • soleIncomeApplicationIndicator
  • specialRuleForTaxHouseholdApplies
  • spokenLanguage
  • spouseHouseholdMemberIndicator
  • spouseInHouseholdIndicator
  • spouseOfVeteranIndicator
  • spouseWorkQuartersIndicator
  • ssnAlternateName
  • ssnIDSConfirmed
  • stateCode
  • stateEmployeeChildIndicator
  • stateHealthBenefitAvaliableIndicator
  • stateHealthBenefitOfferedIndicator
  • statusIDSConfirmed
  • streetName1
  • streetName2
  • studentIndicator
  • studentParentInStateIndicator
  • studentResidencyAgeThreshold
  • submissionDatetime
  • subordinateMember
  • subscribedInsuranceProductTypeAttestation
  • suffix
  • suffixName
  • superordinateMember
  • supportingPhysicalDocument
  • switchNumber
  • systemUserIdentifier
  • systemUserLoginName
  • systemUserName
  • taxFilerIndicator
  • taxFilingStatusChangeIndicator
  • taxFilingStatusTypeCode
  • taxHouseholdEscMecVerification
  • taxReturnFilingStatusTypeCode
  • taxReturnFilingStatusTypeName
  • taxYear
  • telephoneCountry
  • telephoneCountryCode
  • telephonePlace
  • tobaccoLastUsed
  • tribalAmount
  • tribeCode
  • tribeName
  • tribeStateCode
  • unpaidBillIndicator
  • userLastModifiedDateTime
  • usMailIndicator
  • validatingAddressStatusType
  • veteranIndicator
  • withdrawApplicationIndicator
  • writtenLanguage
  • zipPlus4Code


Given the sheer volume of personal information to which Healthcare.gov at least has access, security should be made a top priority.

  Edit

1 Comment:

November 2, 2013 at 2:56 PM  
Comment ID: 2312528738753452112
Written by: Griffin Jones

This is only "some" of the data?!? pregnancyIndicator, memberEmployer, ... ?

Post a Comment