Live threats
HighUnpatched Check Point Gateways Exploited via PHP2Shell, Granting Root Access and Enabling Wiper Attacks BreachUS DOJ Seizes $1.2 B Stolen from Binance Theft and Disrupts North Korean ‘FaceStealer’ Social‑Engineering Tool Rule changeFederal Register limits automated scraping of its sites, directing users to APIs DeadlineFrench court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France CriticalN‑able ‘4EverAble2Shell’ Zero‑Day Exploited Hours After PoC Release, Compromising 21 RMM Servers BreachHackers Exploit N‑central Flaws to Infect 21 Managed Servers, Including 19 Running Hotfix 2 Rule changeFederal Register limits programmatic access due to automated scraping CriticalCritical RCE in Apache HTTP Server HTTP/2 Module (CVE‑2026‑119618) Threatens Millions of Web Servers
Updated 08:43 UTC All intelligence →
REGULATORY WATCH BRIEF Moderate 54 🧭 Regulatory Guidance announced

HHS announces new CMS-ED matching program for health subsidy eligibility

The program will share personal and health data between CMS and ED to verify eligibility for health benefits, raising privacy and security considerations.

ImpactModerate 54
Type🧭 Regulatory Guidance
Statusannounced not law
JurisdictionUS

What happened

The Department of Health and Human Services, via CMS, issued a notice of a new data matching program with the Department of Education’s Federal Student Aid to support eligibility determinations for state health subsidy programs under the Affordable Care Act, including Medicaid and CHIP. The program also aids Medicaid community engagement and prevents concurrent enrollment across states.

Why it matters for trust and compliance

  • Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
  • The program will share personal and health data between CMS and ED to verify eligibility for health benefits, raising privacy and security considerations.

Who is affected

healthcare government education controller processor Centers for Medicare & Medicaid Services (CMS) U.S. Department of Education (ED) Federal Student Aid

Recommended actions

  1. Check that privacy notices describe the practices this addresses.
  2. Map the security requirements to existing controls and close gaps.
  3. Review age assurance and protections for minors' data.
  4. Confirm handling of sensitive data categories meets the stricter rules.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL