By MICHAEL MILLENSON

Imagine a government program where private contractors boost their bottom line by secretly mining participants’ personal information, such as credit reports, shopping habits and even website logins.

It’s called Medicare.

This is open enrollment season, when 64 million elderly and disabled Americans choose between traditional fee-for-service Medicare and private Medicare Advantage (MA) health plans. MA membership is soaring; within a few years it’s expected to encompass the majority of beneficiaries. That popularity is due in no small part to the extra benefits plans can provide to promote good health, ranging from gym membership and eyeglasses to meal delivery and transportation assistance.

There is, however, an unspoken price for these enhancements that’s being paid not in dollars but in privacy. To better target outreach, some plans are routinely accessing sophisticated analytics that draw upon what’s euphemistically labeled “consumer data.” One vendor boasts of having up to 5,000 “certified variables for every adult in America,” including “clinical, social, economic, behavioral and environmental data.” 

Yet while companies like Facebook and Google have faced intense scrutiny, health care firms have remained largely under the radar. The ethical issue is obvious. Since none of this sensitive personal information is covered by the privacy and disclosure rules protecting actual medical data, it is being deliberately used without disclosure to, or explicit consent by, consumers. That’s simply wrong.

But a more fundamental concern involves the analyses themselves.