Maryland’s Health Connection, the state’s Obamacare marketplace, has been plagued by delays in the first days of open enrollment. If users are able to endure long page-loading delays, they are presented with the website’s privacy policy, a ubiquitous fine-print feature on websites that often go unread. Nevertheless, users are asked to check off a box that they agree to the terms.
The policy contains many standard statements about information automatically collected regarding Internet browsers and IP addresses, temporary “cookies” used by the site, and website accessibility. However, at least two conditions may give some users pause before proceeding.
The first is regarding personal information submitted with an application for those users who follow through on the sign up process all the way to the end. The policy states that all information to help in applying for coverage and even for making a payment will be kept strictly confidential and only be used to carry out the function of the marketplace. There is, however, an exception: “[W]e may share information provided in your application with the appropriate authorities for law enforcement and audit activities.” Here is the entire paragraph from the policy the includes the exception [emphasis added]:
The site does not specify if “appropriate authorities” refers only to state authorities or if it could include the federal government, as well. Neither is there any detail on what type of law enforcement and/or audit activities would justify the release of the personal information, or who exactly is authorized to make such a determination. An email to the Maryland Health Connection’s media contact seeking clarification has not yet been answered
The second privacy term that may prompt caution by users relates to email communications. The policy reads:
Since emails to the marketplace could conceivably involve private matters regarding finances, health history, and other sensitive issues, the fact that such information could be made part of the “public record” could prevent users from being as free with their information than they might otherwise be. However, as noted, any requests for such emails would still be subject to Maryland’s Public Information Act which contains certain exceptions to the disclosure rules.
