Protect Your Privacy

The Department of Health (DOH) has been telling Fiscal Intermediaries (FIs) and Managed-Care Plans that they are required to give your personal data, as well as the data of your personal assistant (PA), to Public Partnerships LLC (PPL) without obtaining written consent from you, your designated representative, or your personal assistant.

At CDANY, we believe this is a direct violation of state and federal laws, including HIPAA. Our counsel wrote a letter to DOH regarding this issue. A federal judge in Livingston County has agreed with this position. On January 7, 2025, the judge issued a temporary restraining order that bars the FI from sharing with plans, DOH, or PPL any consumer or PA data or records, citing a reasonable belief it might violate HIPAA. While the restraining order is limited to a specific company, the ruling regarding the violation could apply to all fiscal intermediaries and managed-care plans being directed by the DOH to share sensitive information with PPL.

Your FI may have signed up as a facilitator with PPL. Our lawyers have told us they believe this relationship does not give them the authority to share your information with PPL without your consent. You control your protected health information and they cannot share it without your permission

If you do not wish for your information to be shared with PPL or any other entity, we encourage you to reach out to your current fiscal intermediary and managed-care plan to formally state that you do not consent to the sharing of your sensitive information with PPL. If PPL has already contacted you, and you have not given your permission for your information to be shared with them, you can file a HIPAA complaint.