Are there updates to data privacy that qualified people should consider when applying?

On June 6, 2025, HCPF received a request from CMS for data and information related to eligibility, claims, and cost allocations for people with an “unsatisfactory immigration status.” CMS has renewed their request for data every three months since. The requests include people who accessed Emergency Medicaid Services during each requested quarter (currently three quarters—April through June 2025, July through September 2025, and October through December 2025). While the first request excluded certain populations like pregnant people and children, subsequent requests have included pregnant people. CMS stated that the reason for this particular request is to ensure HCPF has not received funds for federal reimbursement for any person with an unsatisfactory immigration status who participates in a state-only funded program.

Additionally, there is a new court ruling indicating that CMS may share limited Medicaid information with federal agencies under specific circumstances, such as for people who are not “lawfully residing” in the United States. CMS has not yet provided Colorado with details on whether or how it may share information, and we are monitoring developments closely. We will update our members as more information becomes available.

Can I be certain that federal immigration officers will not see the personal information I provide on my application for Medicaid or CHP+?

No. Information that may be shared for people not “lawfully residing” can include citizenship
or immigration status, address, phone number, date of birth, and Medicaid ID. CMS must exclude anyone who is lawfully residing in the United States. If it is not possible to separate this data from information about lawful residents or U.S. citizens, CMS cannot share it. These restrictions remain in place while legal challenges are ongoing.

HCPF only shares Medicaid information with CMS. HCPF does not share information with federal immigration officials, although as this communication outlines, we cannot directly control what CMS shares.

What personal data does Health First Colorado and CHP+ share with the federal government? Is this reported in a way that protects individual people’s privacy?

Reports include basic demographic and eligibility details, such as name, address, date of birth, Social Security Number (if provided) or Medicaid ID, and immigration status for every Medicaid member, who has received services through the Medicaid program. Reports are filed on a regular basis, so disenrolling from Medicaid will not prevent data from being reported to CMS. The exception to this is for people who have only received services through HCPF programs that are exclusively funded by the state budget.

What are the current federal data sharing requirements for Health First Colorado and CHP+?

Health First Colorado (Colorado’s Medicaid program) is a jointly administered and jointly funded federal-state program. Because Health First Colorado serves millions of people with federal support, states must share limited, protected data with CMS for accountability, financing and policy development purposes. Under federal law, HCPF submits monthly reports to CMS through the Medicaid Statistical Information System. Medicaid agencies have to submit reports to CMS because Medicaid is a joint federal–state program, and compliance with federal law and regulations is required. Reporting is how CMS makes sure federal Medicaid dollars are being used properly and in accordance with applicable state and federal laws so that states continue getting federal matching funds. Audits and financial management reviews are standard practices.

What are Colorado’s current data sharing and privacy laws?

Colorado law says state Medicaid and CHP+ workers and their business partners cannot reveal personal information to ICE for immigration investigation or enforcement. It is important to remember that state laws cannot override federal laws. Federal law preempts state law when the two disagree.

HCPF only shares Medicaid information with CMS. HCPF does not share information with federal immigration officials, although as this communication outlines, we cannot directly control what CMS shares.

What is public charge?

The public charge test decides if a person might use government services in the future. It is used to decide if someone can get a green card or visa. Some people will have more difficulty getting a green card or visa if they use certain kinds of government help. The test includes the type of government help you use, your age, income, health, education/skills, and your sponsor’s affidavit.

Could participation in Cover all Coloradans be considered a factor in a public charge decision?

Not at this time. However, executive action, legislation or both could change the factors that determine what constitutes a public charge decision.

Currently, the federal government has the authority to decide what benefits can be considered for public charge decisions. Right now, Medicaid and CHP+ are not considered for public charge, but that could change in the future. The federal government has proposed a change to the public charge rule. HCPF is reviewing what this may mean for members and households in Cover All Coloradans, Emergency Medicaid Services, and Reproductive Health Care Services. As we learn more, we will share updates.

You can find information on the current public charge rules, and resources on the proposed changes.

When can I call?

You can call 7 days a week, 24 hours a day, 365 days a year. The call is always free!