The Consumer Product Safety Commission is facing intense scrutiny after beginning a quiet campaign to pressure major health systems into handing over the personally identifiable medical records of every patient who enters their emergency rooms. While the small federal agency is typically known for recalling defective coffee makers and lawn mowers, this new push represents a massive expansion of its reach. Internal documents and emails obtained by KFF Health News reveal that the commission wants millions of records covering everything from simple broken bones to suicide attempts and vaccine reactions, moving far beyond its traditional focus on specific product failures.
To manage this influx of sensitive data, the government has contracted Konza Health, a private firm based in Kansas. Hospital executives and legal experts have expressed deep alarm over the request, particularly because representatives from Konza have described participation as mandatory. This shift marks a stark departure from the agency’s existing surveillance system, which relies on voluntary reporting and strictly removes any identifying patient information before data is analyzed. Now, the agency is seeking full names, addresses, and detailed diagnoses, sparking fears about how such a vast amount of private health information can be safeguarded once it leaves the hospital.
Legal scholars and hospital administrators are questioning whether the CPSC even has the authority to make these demands. Federal law generally requires the agency to notify the public and allow for a comment period before requesting information from ten or more entities—a step that was bypassed despite plans to enroll at least 100 hospitals by the end of the year. Furthermore, critics argue that threatening hospitals with penalties for information blocking may conflict with established federal privacy laws designed to protect patient confidentiality.
This aggressive data grab comes during a period of significant instability within the commission following the removal of several board members under the Trump administration. It mirrors broader trends across other federal agencies, including efforts by the Office of Personnel Management and Health and Human Services to gain unprecedented access to citizens’ medical files. While a CPSC spokesperson claims the move is simply part of modernizing their surveillance tools to improve data quality, many in the healthcare industry view it as an overreach that places patient privacy at unacceptable risk.
