CPSC Demands Hospital ER Records Without Legal Notice, Privacy Experts Warn July 28

The Consumer Product Safety Commission is demanding that major U.S. hospitals hand over detailed, personally identifiable emergency room records for millions of patients, marking a stark departure from its traditional product-focused mission. The agency began pressuring hospital executives this year to share data with private contractor Konza Health, targeting at least 100 hospitals by year-end 2026. Hospital lawyers and privacy experts have questioned the CPSC’s legal authority and whether it followed required procedures.

How the CPSC’s demand contradicts its own rules

For more than 45 years, the CPSC instructed hospitals to strip patient identifiers like names, addresses, and birthdates before submitting injury data. The agency’s own 214-page coding manual explicitly reserves identifiable information for fewer than one percent of cases requiring follow-up investigation. The new program reverses this entirely, demanding hospitals provide all ER patients’ identifiable information to Konza Health, according to documents obtained by KFF Health News.

What data the CPSC wants from hospitals

The agency seeks records covering more than 10,000 diagnostic conditions, far beyond product-related injuries. This includes broken bones, childhood vaccine reactions, and adult suicide attempts. CPSC officials told hospitals in emails that participation is mandatory or required. Konza Health President Laura McCrary stated the company will remove only information not needed by the CPSC before sharing records, but hospitals worry about data security and whether the contractor can safeguard such sensitive information.

Why hospitals and experts are pushing back

Major health systems including Mass General Brigham and Harborview Medical Center have refused to comply, citing potential HIPAA violations and questioning the CPSC’s legal authority to collect personally identifiable data. Hospital lawyers note the agency skipped the federally required public comment period before implementing the system. Privacy experts warn the shift represents a drastic expansion of federal health surveillance without proper legal process or public input.

What happens next and what it means for patients

The CPSC announced the program on July 21 after KFF Health News inquired about it, suggesting the agency had kept the initiative quiet. The agency aims to launch the automated system starting next year under the name NEISS-R, claiming it will improve efficiency and speed product safety decisions. However, the lack of transparency, absence of public notice, and scope far exceeding the agency’s traditional mission raise questions about patient privacy rights and federal overreach. Patients whose ER records are shared have no control over who accesses their data or how it is used.

Final Thoughts

The CPSC’s demand for detailed ER records without public notice or legal authority represents a significant privacy risk for millions of Americans. Hospital refusals and legal challenges will likely determine whether the program proceeds.

FAQs

Disclaimer:

The content shared by Meyka AI PTY LTD is solely for research and informational purposes.  Meyka is not a financial advisory service, and the information provided should not be considered investment or trading advice.