Summary (tl;dr)

The Trump administration, through the Consumer Product Safety Commission (CPSC), is demanding that at least 100 hospitals nationwide share detailed, personally identifiable emergency room records with a private contractor, Konza Health, by the end of 2026, sparking widespread privacy and legal concerns.

Essential Background

For over five decades, the CPSC has operated the National Electronic Injury Surveillance System (NEISS), a voluntary program that collected anonymized injury data related to consumer products from a sample of hospitals. This system, designed in 1972, relied on manual review and coding of medical records and excluded patient identifiers. While NEISS expanded in 2000 to collect data on all injuries for the Centers for Disease Control and Prevention, it maintained its focus on anonymized data. This new initiative follows a period where President Trump fired the CPSC's three Democratic board members, leaving the agency without a governing board, and amid a broader push by the administration for increased access to Americans' health data.

The Full Story

The CPSC recently announced an overhaul of its injury tracking system, named NEISS-Remodel (NEISS-R), with the stated goal of modernizing data collection using electronic health records. However, this "modernization" involves a significant shift: the CPSC is now pressuring at least 100 hospitals to provide personally identifiable information, including names, addresses, and diagnoses, for all emergency room visits—not just product-related injuries—to a private contractor, Konza Health, by the end of 2026. The scope of data requested is extensive, covering everything from broken bones to vaccine reactions and even suicide attempts. Both CPSC officials and Konza Health representatives have informed hospitals that participation is "mandatory" or "required," suggesting potential "information blocking" penalties for non-compliance. This aggressive approach has ignited substantial concerns among hospital attorneys and health industry experts, who are questioning the CPSC's legal authority to demand such sensitive, identifiable medical records and its capacity to ensure patient privacy, potentially violating federal privacy laws. Despite formally announcing the new program on July 21, the CPSC did not publicly address the extent of the data demands or the alarm it has caused among hospital leaders. Furthermore, the agency has not provided the legally required public notice and comment period for collecting data from more than 10 entities. Several major hospital systems, including Mass General Brigham in Boston, Henry Ford Health in Detroit, and Harborview Medical Center in Seattle, have already declined or questioned their participation, citing patient privacy and legal obligations. Konza Health has a five-year contract worth up to $15.9 million to manage and analyze this data.

Why It Matters

This trending issue is significant due to the profound implications for patient privacy and federal oversight. The CPSC's demand for personally identifiable emergency room records represents a dramatic expansion of government data collection beyond its historical focus on anonymized, product-related injuries, now encompassing a vast array of sensitive health information. Experts and hospital systems are concerned about potential violations of federal privacy laws and the security risks associated with sharing millions of identifiable medical records with a private entity. Critics argue that the CPSC's actions may exceed its legal authority, particularly given that its own operational manual previously cautioned against collecting personally identifiable information. The lack of a public comment period for such a sweeping change in data collection policy further raises concerns about transparency and due process.

Geographic Location

• Washington, D.C., District of Columbia, United States (location of the Consumer Product Safety Commission, which issued the demands)
• Boston, Suffolk County, Massachusetts, United States (Mass General Brigham declined to participate)
• Detroit, Wayne County, Michigan, United States (Henry Ford Health declined to participate)
• Seattle, King County, Washington, United States (Harborview Medical Center declined to participate)
• Kansas, United States (Konza Health, the private contractor, is based in Kansas)