The Consumer Product Safety Commission (CPSC) has requested that major U. S.
health systems provide detailed, personally identifiable emergency room records to a private contractor, according to internal documents and agency officials.
>>> Flagstar Bank Declares Q3 2026 Dividends on Common and Preferred Stock
The agency aims to compel at least 100 hospitals to transmit sensitive patient data by the end of the year as part of an effort to modernize its injury surveillance system.
The requested information covers emergency room visits for injuries ranging from fractures to childhood vaccine reactions and suicide attempts, including names, addresses, and diagnoses.
Contractor Role and Legal Concerns
The program relies on Kansas-based contractor Konza Health, which won a five-year contract worth up to $15.9 million last fall to automatically extract and analyze hospital records nationwide.
Hospital administrators and legal experts have raised alarms over potential privacy violations and questioned whether the agency has the legal authority to require such data collection without prior public notice.
Legal scholars cautioned that transferring identifiable medical files to a third party creates significant data security exposure for patients.
“The whole thing is troubling,” said Sharona Hoffman, professor of health law at Case Western Reserve University.
>>> US Military Strikes Fail to Curb Cocaine Inflow, DEA Assessment Finds
“If this company really is collecting identifiable information, that is worrisome for patients.”
Agency representatives acknowledged that previous voluntary data collection efforts limited the statistical usefulness of emergency room reporting, prompting the operational shift.
“Operated as a voluntary program, the ability of hospitals to opt out limited the sample size and usefulness of the data,” said Steve Roney, CPSC spokesperson.
Former leadership members within the agency expressed skepticism regarding the scope and necessity of the newly expanded data demands.
“They want to collect as much data as possible, but are they thoughtful about what exactly they collect and what the agency really needs?”
said a former CPSC chair.
>>> Police Investigate Diving Deaths of Two Women at Loch Fyne
Hospital officials confirmed receiving communications from Konza Health framing participation as compulsory, while citing concerns over federal privacy laws and potential penalties under data-blocking regulations.
