(UNITED STATES) — The Trump administration directed the Centers for Medicare and Medicaid Services to share Medicaid enrollee data with immigration enforcement, handing over basic personal information that officials said could help locate people for deportation and triggering a legal and political fight that still has not ended.

By December 2025, a federal court had allowed some of that sharing to continue, though under narrower limits than the administration first pursued. Immigration authorities can use some Medicaid-related information for enforcement, but they cannot access personal health records or other sensitive medical information under the ruling now in place.

The information at issue included citizenship, immigration status, address, phone number, date of birth and Medicaid ID. Those fields are not treatment records, but they can identify and locate a person inside the country, which turned a health coverage database into part of an immigration enforcement dispute.

U.S. District Judge Vince Chhabria of the Northern District of California narrowed what could be shared in a California-led lawsuit. Vince Chhabria allowed sharing only for people unlawfully living in the United States and barred access to personal health records and other sensitive medical information.

His order did not settle the dispute in permanent terms. The ruling remained tied to that lawsuit and could change if the Department of Health and Human Services and Immigration and Customs Enforcement issued new policies with a legal basis for broader collection.

California and other Democratic-led states challenged the directive after federal officials moved to connect Medicaid enrollee data to deportation work. California Attorney General Rob Bonta led a coalition of 21 Democratic attorneys general in the case, arguing that the sharing violated privacy protections and would deter immigrants from seeking medical care.

Trump officials defended the effort as an enforcement tool. They argued the data was needed to locate people who had been ordered deported or released by sanctuary jurisdictions, putting the dispute squarely between the administration’s immigration goals and state claims that Medicaid information should not flow into deportation operations.

Robert F. Kennedy Jr., the Health and Human Services secretary, ordered CMS to provide the data. Dr. Mehmet Oz, the CMS administrator, later sent states a notice saying he was putting them “on notice” that federal dollars would no longer be allowed to be diverted for immigrant health care.

Gov. Gavin Newsom condemned the administration’s move in blunt terms, calling it “legally dubious” and “an abuse.” Dr. Shannon Udovic-Constant, president of the California Medical Association, called the administration’s actions “reckless.”

The conflict extends beyond the sharing order itself because several states already fund broader health coverage for some immigrants with state money. Federal Medicaid dollars cannot be used for most undocumented immigrants, but some states operate state-funded Medicaid-like coverage or other health programs for certain residents regardless of immigration status.

Those jurisdictions include California, Illinois, Colorado, New York, Washington, Oregon, Minnesota and Washington, D.C. Their policies do not change federal Medicaid law, but they sharpened the dispute because the administration’s pressure campaign landed hardest in places that had already built public health coverage systems reaching beyond federally eligible groups.

That overlap helps explain why California stood at the center of the lawsuit. A state that expanded coverage to some immigrants regardless of status had both a larger practical stake in protecting enrollee information and a larger political incentive to challenge a federal directive that linked health enrollment records to deportation enforcement.

The court’s limits drew a line between identification data and medical records. ICE can use some Medicaid-related information for immigration enforcement, but the ruling bars access to personal health records and other sensitive medical information, preserving at least part of the firewall that states and medical groups said patients expect when they seek care.

Even with that restriction, the order left room for enforcement authorities to use data that many enrollees would recognize as highly personal. A name linked to an address, phone number, date of birth, citizenship, immigration status and Medicaid ID does not reveal a diagnosis, but it can still place a person within reach of immigration officers.

States challenging the directive argued that this alone could chill enrollment and treatment. Their position rested not on whether a hospital chart changed hands, but on whether immigrants would trust any program connected to government agencies if information gathered for health coverage could later help identify them for removal.

The Trump administration pressed the opposite argument, treating the data as a lawful source of location information for people already in the deportation system or released by sanctuary jurisdictions. That framing cast the dispute as an enforcement question, not a health policy question, even though the records originated inside a public insurance program.

Vince Chhabria’s ruling left both sides with part of what they wanted and part of what they did not. The administration kept some access. California and its allies blocked access to personal health records and won limits that confine sharing to people unlawfully living in the United States.

Nothing in the current order closes the broader fight over federal authority. The case still turns on how much information the government can demand from CMS, how far immigration enforcement can reach into Medicaid systems, and whether agencies can rewrite their policies in a way that survives judicial review.

That continuing uncertainty matters most in places where immigrant communities rely on public programs and state-funded coverage. California, Illinois, Colorado, New York, Washington, Oregon, Minnesota and Washington, D.C., each in different ways, sit inside the collision between expanded access to care and a federal push to use government-held data for deportation work.

The practical effect today is narrower than the administration first sought but broader than its critics wanted. Some Medicaid enrollee data can flow to immigration enforcement. Personal medical records cannot. The legal contest over where that boundary sits, and whether the Trump administration can move it again, remains active.