State-run health insurance exchanges in 20 U.S. states and the District of Columbia embedded advertising trackers that transmit personal user data to big-tech firms [1].

This discovery raises significant privacy concerns because these government-operated portals handle sensitive medical and demographic information. The transmission of such data to private advertising entities may violate user trust and existing privacy expectations for public health services.

An investigation reported this week found that the exchanges used these trackers to monitor user activity [2]. The data shared with companies including Meta Platforms, TikTok, and LinkedIn includes personal details from users navigating the marketplaces [1].

In the District of Columbia, the exchange was specifically found to be sharing data regarding race and citizenship status with these tech firms [3]. These trackers were integrated into the websites to facilitate advertising and data collection [2].

Experts and officials have flagged the practice as a privacy risk. The investigation examined a total of 20 state-run exchanges to determine the extent of the tracking [1]. The findings indicate that nearly all of these sites utilized the tools to export user behavior and personal identifiers to third-party platforms [2].

While the trackers were intended for advertising purposes, the sensitivity of the information, ranging from citizenship to health-related navigation, creates a vulnerability for users of the U.S. healthcare system [3].

“State-run health insurance exchanges in 20 U.S. states embedded advertising trackers that transmit personal user data to big-tech firms.”

The integration of commercial advertising trackers into government health portals suggests a systemic failure in privacy oversight within state-level digital infrastructure. By allowing third-party firms like Meta and TikTok to collect demographic and activity data, these exchanges have effectively bridged the gap between sensitive public health records and private advertising profiles, potentially exposing vulnerable populations to targeted profiling.