Notice2025-20911

Notice of Medicaid Information Sharing Between the Centers for Medicare & Medicaid Services and the Department of Homeland Security

Primary source

Metadata and text below are from the Federal Register, a public-domain U.S. government work. Always verify the official published version before relying on it for any legal matter.

Published
November 25, 2025

Issuing agencies

Health and Human Services DepartmentCenters for Medicare & Medicaid Services

Abstract

This notice announces that the Department of Health and Human Services (HHS), Centers for Medicare & Medicaid Services (CMS), will share certain information with the U.S. Department of Homeland Security (DHS), and its component agency, U.S. Immigration and Customs Enforcement consistent with federal laws requiring the provision of information to DHS.

Full Text

<html>
<head>
<title>Federal Register, Volume 90 Issue 225 (Tuesday, November 25, 2025)</title>
</head>
<body><pre>
[Federal Register Volume 90, Number 225 (Tuesday, November 25, 2025)]
[Notices]
[Pages 53324-53326]
From the Federal Register Online via the Government Publishing Office [<a href="http://www.gpo.gov">www.gpo.gov</a>]
[FR Doc No: 2025-20911]


=======================================================================
-----------------------------------------------------------------------

DEPARTMENT OF HEALTH AND HUMAN SERVICES

Centers for Medicare & Medicaid Services

[CMS-9163-N]


Notice of Medicaid Information Sharing Between the Centers for 
Medicare & Medicaid Services and the Department of Homeland Security

AGENCY: Centers for Medicare & Medicaid Services (CMS), Department of 
Health and Human Services (HHS).

ACTION: Notice.

-----------------------------------------------------------------------

SUMMARY: This notice announces that the Department of Health and Human 
Services (HHS), Centers for Medicare & Medicaid Services (CMS), will 
share certain information with the U.S. Department of Homeland Security 
(DHS), and its component agency, U.S. Immigration and Customs 
Enforcement consistent with federal laws requiring the provision of 
information to DHS.

DATES: This notice is applicable immediately.

FOR FURTHER INFORMATION CONTACT: The Center for Medicaid and CHIP 
Services at <a href="/cdn-cgi/l/email-protection#efaca2acbcaf8c829cc187879cc1888099"><span class="__cf_email__" data-cfemail="6a292729392a09071944020219440d051c">[email&#160;protected]</span></a>.

SUPPLEMENTARY INFORMATION:

I. Background

    This notice provides information regarding the provision of certain 
information collected by the Department of Health and Human Services 
(HHS), Centers for Medicare & Medicaid Services (CMS), with U.S. 
Department of Homeland Security (DHS) and its component agency U.S. 
Immigration and Customs Enforcement (ICE). CMS partners with states to 
administer Medicaid. In doing so, CMS collects information regarding 
individuals for a variety of purposes related to administration, 
oversight, and program integrity. This notice applies to data collected 
by CMS in connection with its role in the Medicaid program.
    CMS receives information related to immigration status because it 
is relevant to the Medicaid program. For example, under Medicaid, 
states are prohibited from claiming federal financial participation 
(FFP) for ``medical assistance furnished to an alien who is not 
lawfully admitted for permanent residence or otherwise permanently 
residing in the United States under color of law.'' Section 1903(v)(1) 
of the Social Security Act (the Act) (42 U.S.C. 1396b(v)(1)). The 
exception to this prohibition is that FFP can be paid if the care and 
services are ``necessary for the treatment of an emergency medical 
condition of the alien,'' the alien otherwise meets the eligibility 
requirements for Medicaid, and the care and services are not related to 
an organ transplant procedure. Section 1903(v)(2) of the Act (42 U.S.C. 
1396b(v)(2)).
    Federal laws govern the collection, use, and disclosure of CMS 
information. Depending on the type of information, applicable laws may 
include the Privacy Act of 1974 (5 U.S.C. 552a), section 1106(a) of the 
Act (42 U.S.C. 1306(a)(1)) and CMS implementing regulations at 42 CFR 
part 401, subpart B, and other federal laws. In addition, CMS has 
established a robust privacy and security program (<a href="https://security.cms.gov/topic/privacy">https://security.cms.gov/topic/privacy</a>). CMS has previously stated on its 
website that the information regarding individuals that it collects 
will only be used for administration of its programs. See, e.g., CMS, 
CMS Privacy Home Page, <a href="https://www.cms.gov/about-cms/information-systems/privacy">https://www.cms.gov/about-cms/information-systems/privacy</a> (``To protect your privacy, we'll tell you before we 
collect any personal information we need to run our health care 
programs, and only use it for that purpose.''). CMS also has stated on 
its website that it will not use immigration status for immigration 
enforcement purposes. See CMS, More information for immigrant 
households, <a href="https://www.healthcare.gov/immigrants/immigrant-families/">https://www.healthcare.gov/immigrants/immigrant-families/</a> 
(``We won't use any immigration status you share with us for 
immigration enforcement purposes.''). This policy statement was made in 
the context of and in reliance on a 2013 ICE policy that stated that 
ICE would not use CMS data or information provided by individuals to 
obtain coverage for certain benefits under CMS programs as the basis 
for pursuing a civil immigration enforcement action. ICE has rescinded 
this policy.\1\ See ICE Policy Memorandum 11066.2, Use of HHS 
Information and Rescission of ICE Policy Memorandum 11066.1, 
Clarification of Existing Practices Related to Certain Health Care 
Information (October 25, 2013, 2013 Policy Memorandum), (Oct. 27, 2025, 
ICE Policy Memorandum 11066.2).
---------------------------------------------------------------------------

    \1\ ICE notes that it is currently precluded from using this 
information due to a Preliminary Injunction and it will proceed with 
this policy when the Preliminary Injunction is lifted. See ICE 
Policy Memorandum 11066.2, see also California v. HHS, No. 25-05536 
(N.D. Cal. filed July 1, 2025). Under that same Preliminary 
Injunction, CMS is currently precluded from sharing certain Medicaid 
data with ICE for immigration enforcement purposes. Similarly, CMS 
will proceed with this policy when the Preliminary Injunction is 
lifted.
---------------------------------------------------------------------------

II. Legal Authority

    Several federal laws authorize CMS to make certain information 
available to

[[Page 53325]]

DHS. See ICE Policy Memorandum 11066.2.
    <bullet> Under the Homeland Security Act of 2002, the Secretary of 
Homeland Security shall have access to information ``relating to 
matters under the responsibility of the Secretary that may be 
collected, possessed, or prepared by an agency of the Federal 
Government as the President may further provide.'' 6 U.S.C. 122(a)(2). 
Additionally, the Secretary of Homeland Security can obtain this 
information upon request and can enter into cooperative agreements with 
other agencies to provide DHS officials with access to the data on a 
regular or routine basis, including requests or arrangements involving 
broad categories of material, access to electronic databases, or both. 
6 U.S.C. 122(b).
    <bullet> Under the Immigration and Nationality Act, ``[a]ny 
information in any records kept by any department or agency of the 
Government as to the identity and location of aliens in the United 
States shall be made available to'' immigration authorities. 8 U.S.C. 
1360(b). This ``expansive'' language reaches ``broad[ ] swaths of 
information'' in the possession of the federal government. United 
States v. California, 921 F.3d 865, 892 (9th Cir. 2019).
    Moreover, under 8 U.S.C. 1373, ``[n]otwithstanding any other 
provision of Federal, State, or local law, a Federal, State, or local 
government entity or official may not prohibit, or in any way restrict, 
any government entity or official from sending to, or receiving from, 
[DHS] information regarding the citizenship or immigration status, 
lawful or unlawful, of any individual.'' 8 U.S.C. 1373(a). 
Additionally, ``[n]otwithstanding any other provisions of Federal, 
State, or local law, no person or agency may prohibit, or in any way 
restrict, a Federal, State, or local government entity'' from 
transmitting, maintaining, or exchanging information regarding 
immigration status with any other Federal, State, or local government 
entity. 8 U.S.C. 1373(b).
    <bullet> The Privacy Act of 1974 does not provide authority for a 
disclosure. However, with respect to U.S. citizens and lawful permanent 
residents, an exception in the law would not require an agency to 
obtain prior written consent of the individual to whom the record 
pertains to disclose a record contained in a system of records to 
another federal agency ``for a civil or criminal law enforcement 
activity if the activity is authorized by law, and if the head of the 
agency has made a written request to the agency which maintains the 
record specifying the particular portion desired and the law 
enforcement activity for which the record is sought,'' See 5 U.S.C. 
552a(b)(7).\2\
---------------------------------------------------------------------------

    \2\ The Privacy Act of 1974 only applies to U.S. citizens and 
lawful permanent residents. See 5 U.S.C. 552a(a)(2) (defining 
individual to include U.S. citizens and lawful permanent residents).
---------------------------------------------------------------------------

III. Purpose of Information Sharing

    This notice announces CMS policy that CMS will provide certain 
information to ICE upon request from ICE consistent with federal laws 
to advance administration priorities related to immigration laid out in 
the following Executive Orders.
    <bullet> Executive Order 14159, ``Protecting the American People 
Against Invasion''--The purpose of this Executive Order is to ``ensure[ 
] that the Federal Government protects the American people by 
faithfully executing immigration laws of the United States.'' (90 FR 
8443, January 29, 2025).
    <bullet> Executive Order 14165, ``Securing Our Borders''--This 
Executive Order establishes a policy of the United States ``to take all 
appropriate action to secure the borders of our Nation'' through a 
range of means, including deterring and preventing the entry of illegal 
aliens into the United States, and removing promptly all aliens who 
enter or remain in violation of Federal law. (90 FR 8467, January 30, 
2025).
    <bullet> Executive Order 14218, ``Ending Taxpayer Subsidization of 
Open Borders''--This Executive Order directs federal agencies to 
faithfully carry out the immigration laws and ``to ensure, to the 
maximum extent permitted by law, that no taxpayer-funded benefits go to 
unqualified aliens.'' (90 FR 10581, February 25, 2025).
    <bullet> Executive Order 14243, ``Stopping Waste, Fraud, and Abuse 
by Eliminating Information Silo''--One of the purposes of this 
Executive Order is to promote inter-agency data sharing. It directs 
agencies to ``take all necessary steps, to the maximum extent 
consistent with law,'' to ensure access to information ``for purposes 
of pursuing Administration priorities related to the identification and 
elimination of waste, fraud, and abuse.'' (90 FR 13681, March 25, 
2025).
    As noted by ICE in ICE Policy Memorandum 11066.2, certain 
information held by CMS is useful for immigration enforcement purposes 
and to support the full and efficient execution of ICE's mission. ICE 
Policy Memorandum 11066.2 at 4. This CMS information ``represents a 
particular set of accurate and quality data that can be used to enhance 
ICE's data and improve its law enforcement actions.'' Id. More broadly, 
using CMS information as detailed in the ICE Policy Memorandum 11066.2 
``allows ICE to more efficiently achieve its mission of preserving 
national security and public safety.'' Id.

IV. Information To Be Shared

    ICE announced that, at this time, it contemplates requesting from 
CMS available biographical, contact, and location information, though 
ICE reserved the right, in a specific case, to consider requesting 
other information on a case-by-case basis as permitted by law. Id. at 
2. This CMS information may include Medicaid information or data shared 
with CMS by states. CMS will share the minimum required information 
with ICE, giving due consideration to the information requested by ICE, 
the federal laws that govern the provision of information to DHS and 
the CMS information requested, the capabilities of CMS systems, and the 
CMS resources available to respond to ICE information requests. 
Examples of information that CMS may share with ICE include the 
following: citizenship and immigration status, location, and phone 
numbers, and, in specific cases, other information on a case-by-case 
basis as permitted by law. CMS will respond to requests made by ICE and 
will transfer any information to ICE in a secure manner and establish 
appropriate safeguards for the information provided, including through 
written agreements or other arrangements with ICE.
    CMS intends its provision of various categories of information to 
be severable from each other. For instance, CMS's provision of 
biographical information about aliens is severable from its provision 
of location information about aliens or from its provision of other 
types of information that ICE does not presently intend to request for 
immigration enforcement purposes. In the event a court finds that ICE 
does not have a right to access a specific type of data (or that CMS is 
not authorized to provide such data), CMS intends that the provision of 
specific categories of data be severable from each other.

V. Reliance Interests

    CMS has considered the fact that states, providers, beneficiaries, 
health insurance issuers, other regulated entities, and the general 
public may have relied on past CMS statements that information 
collected by CMS would only be used for program administration purposes 
and would not be used for immigration enforcement purposes. The CMS 
statements were made against the backdrop of federal laws that 
authorize

[[Page 53326]]

CMS to share information with DHS, upon request, and a policy choice 
made by ICE not to use certain information as the basis for pursuing a 
civil immigration enforcement action. These federal laws have long 
apprised the regulated public that immigration authorities have access 
to ``broad swaths'' of information possessed by other federal agencies 
relevant to immigration enforcement. Brief of Appellee State of 
California in United States v. California, No. 18-16496, 2018 WL 
5880015 (9th Cir. Nov. 5, 2018) (``When Congress has intended to reach 
broad swaths of information, or specifically a person's address, it has 
used different words. For example . . . the INA requires federal 
agencies to communicate to ICE, upon request, `[a]ny information in any 
records . . . as to the identity and location of aliens,' [8 U.S.C. 
1360(b).]'')); see also Policy Memorandum 11066.2 at 4. To ensure that 
the public is aware that CMS intends to disclose certain information to 
DHS consistent with federal laws, including available information 
contained in program eligibility information, CMS is publishing this 
notice and will update relevant websites to reflect that federal laws 
authorize CMS to share certain information with DHS.
    ICE determined, as stated in ICE Policy Memorandum 11066.2, that 
the ``value of this information to immigration and criminal law 
enforcement operations outweighs any relevant reliance interests.'' ICE 
Policy Memorandum 11066.2 at 4. Pursuant to the 6 U.S.C. 122(a)-(b), 8 
U.S.C. 1360(b), and 8 U.S.C. 1373, ``ICE has always had authority to 
request and receive information for immigration enforcement purposes.'' 
ICE Policy Memorandum 11066.2 at 5.
    As ICE stated, ``[t]he statutory provisions that both give ICE the 
right to request this information, and that require aliens to 
affirmatively provide that information to ICE upon request, are 
longstanding, and there is no exception to their application under 
Medicaid.'' ICE Policy Memorandum 11066.2 at 6.
    Given the longstanding legal requirements for aliens to apprise 
immigration authorities of their whereabouts, whatever reliance states, 
providers, beneficiaries, health insurance issuers, other regulated 
entities, and the general public have placed on DHS's exercise of its 
enforcement discretion and CMS's information not being shared with 
immigration authorities due to that exercise of discretion is entitled 
to little to no weight. The biographical and location information that 
ICE intends to seek from CMS is information that ICE has long had a 
right to access. Accordingly, any interests in not sharing this 
information with ICE are greatly diminished and outweighed by ICE's 
legitimate law enforcement interests.
    Moreover, while some states and providers contend that it would be 
detrimental to public health if aliens do not partake in federal health 
benefits for which they are eligible (for example, federally funded 
Medicaid services for emergency medical conditions) because if CMS 
shares information with ICE, the legal requirements regarding 
information sharing with ICE long predate restrictions on Medicaid to 
unqualified aliens. Compare, e.g., 8 U.S.C. 1360(b) (enacted in 
Immigration and Nationality Act, 66 Stat. 163, 234 (1952)), with 42 
U.S.C. 1396b(v)(1), 8 U.S.C. 1611(b)(1)(A) (enacted in Personal 
Responsibility and Work Opportunity Reconciliation Act of 1996, 110 
Stat. 2105, 2180). The concerns of states and providers are entitled to 
little to no weight because they reflect the scheme that Congress 
created, which provides benefits to aliens under certain limited 
circumstances and gives immigration authorities the right to access 
information that arises from the conferral of those benefits.
    Finally, to the extent that states provide data to CMS on aliens 
who receive health benefits or services funded only by the state, 
states are doing so voluntarily. CMS only requires states to submit 
data associated with beneficiaries who receive federally-funded 
Medicaid services. It is incumbent upon the states to separate the data 
that they collect when submitting it to CMS. Any reliance interests 
with respect to the population of aliens who receive health benefits or 
services funded only by states are entitled to no weight since states 
are not required to submit this information to CMS.

VI. Additional Information

    Although notice and comment is unnecessary for this statement, CMS 
has been explicitly instructed by the district court in California v. 
HHS, No. 3:25-cv-05536 (N.D. Cal.), to address its reasons for forgoing 
notice and comment.
    As explained above, CMS's prior policy statement that it would not 
use CMS data or information for immigration enforcement purposes was 
made in the context of ICE's prior policy, as described in its 2013 
Policy Memorandum, to exercise its enforcement discretion to abstain 
from requesting information from CMS as the basis for pursuing a civil 
immigration enforcement action. CMS's prior policy statement did not 
change legal norms, as described above, created by Congress.
    This notice communicates a CMS policy that CMS will share certain 
information consistent with federal law authorizing such sharing with 
respect to requests for CMS information from DHS and ICE. CMS is 
accordingly updating its policy statement in this regard. CMS is 
publishing this notice solely to inform interested parties of its 
decision to provide information to ICE consistent with federal law. 
This is, at the most, a policy statement as defined by 5 U.S.C. 
553(b)(A) and (d)(2) and is exempt from notice and comment for that 
reason alone. See Perez v. Mortgage Bankers Ass'n, 575 U.S. 92, 95 
(2015) (not all rules must be issued through notice and comment, 
including interpretive rules and general statements of policy under 
section 4(b)(A) of the Administrative Procedure Act.).
    The Administrator of the Centers for Medicare & Medicaid Services 
(CMS), Mehmet Oz, having reviewed and approved this document, 
authorizes Evell Barco Holland, who is the Federal Register Liaison, to 
electronically sign this document for purposes of publication in the 
Federal Register.

Evell Barco Holland,
Federal Register Liaison, Centers for Medicare & Medicaid Services.
[FR Doc. 2025-20911 Filed 11-21-25; 11:15 am]
BILLING CODE 4120-01-P


</pre><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body>
</html>
Indexed from Federal Register on November 25, 2025.

This is legal information, not legal advice. Laws vary by jurisdiction and change frequently. Always verify current law with official sources and consult a licensed attorney in your jurisdiction for advice on your specific situation.