Vast data warehouse raises HealthCare.gov privacy concerns

A government data warehouse that stores personal information on millions of HealthCare.gov customers is raising privacy concerns at a time when major breaches have become distressingly common. A government privacy assessment dated Jan 15 says data “is maintained indefinitely at this time,” but the Obama Administration said June 15 that no final time frame has been decided, and the National Archives has recommended a 10-year retention period.

Known as MIDAS, the system is described on a federal website as the “perpetual central repository” for information collected under the health care law. The information stored includes names, Social Security numbers, birthdates, addresses, phone numbers, passport numbers, employment status and financial accounts. The vast scope of the information -- and the lack of a final plan for destroying old records nearly four years after the system was commissioned -- have raised concerns about privacy and the government’s judgment on technology.