Suspicions that U.S. consumers\u2019 personal information could be accessed from India led regulators to abruptly bar two large private sector enrollment websites from accessing the Affordable Care Act marketplace in August.<\/p>\n
New details about the suspensions come in legal filings made late Friday stemming from an effort by the two to regain access to the Obamacare marketplace before the upcoming ACA open enrollment period, which starts Nov. 1.<\/p>\n
The Centers for Medicare & Medicaid Services wrote in a Sept. 2 letter<\/a> to the companies that they were suspended after the agency identified \u201ca serious lapse in the security posture\u201d that could have led to marketplace data, including consumers\u2019 personal information, being accessed from overseas.<\/p>\n The letter, included in the court filings, also noted that regulators will audit the two companies because they have \u201creasonable suspicion\u201d that they are players in a separate problem<\/a>: signing people up for Obamacare coverage \u2014 or changing their policies \u2014 without the consumers\u2019 permission.<\/p>\n Whether those legal issues will be resolved before the upcoming enrollment period is an open question. Currently, the concerns raised about the companies remain allegations, with none of the legal challenges or the audit close to a ruling or conclusion.<\/p>\n Still, the larger issue of fraudulent ACA enrollment by rogue insurance agents seeking commissions will continue to pose a headache for regulators, with more than 200,000 complaints filed by consumers in the first six months of 2024. And it has become a political problem<\/a> for the Biden administration. GOP lawmakers blamed the schemes<\/a> partly on Biden-backed expanded Obamacare premium subsidies.<\/p>\n President Joe Biden has claimed record-breaking enrollment under the ACA as one of his administration\u2019s major accomplishments, and regulators are looking to thwart deceptive enrollment schemes without slowing legitimate sign-ups. In recent weeks they\u2019ve removed at least 200 agents\u2019 access to the federal ACA marketplace, and in July began requiring<\/a>, in many circumstances, that brokers participate in three-way calls with their clients and the healthcare.gov help center before changes can be finalized.<\/p>\n The CMS letter now adds another layer. It is the first time this year the agency has called out a company over questionable enrollments, saying it suspects \u201cthe Speridian Companies\u201d might have \u201cdirected its employees and other agents to change Marketplace enrollees\u2019 coverage and enroll insured and uninsured consumers without the enrollees\u2019 consent.\u201d<\/p>\n California-based Speridian Global Holdings owns the companies in question, which include enrollment platform Benefitalign and TrueCoverage, doing business as the Inshura enrollment site. It has a data center in India.<\/p>\n The now-suspended Benefitalign site handled at least 1.2 million applications for ACA coverage during the last open enrollment period, according to court documents, which would rank it among the largest of the private enrollment sites allowed to integrate with healthcare.gov, the federal marketplace.<\/p>\n Previously, CMS had said publicly only that it suspended the websites for \u201canomalous activity<\/a>.\u201d<\/p>\n The suspended companies deny any wrongdoing related to enrollment schemes. Spokesperson Catherine Riedel declined comment beyond their court filings.<\/p>\n In late August they filed a complaint against CMS over the suspensions in U.S. District Court for the District of Columbia, seeking a restraining order. They added to that complaint<\/a> on Sept. 6, calling CMS\u2019 suspension action \u201clawless.\u201d<\/p>\n On Aug. 8, CMS suspended the two websites from accessing healthcare.gov information.<\/p>\n It did so, according to the Sept. 2 letter, over concerns that some consumer information \u201cis processed and\/or stored\u201d in India, citing \u201csuspicions\u201d that the data is \u201cbeing accessed from outside of the United States.\u201d<\/p>\n That\u2019s a problem, the letter says, because marketplace data must stay in the U.S. to \u201celiminate the possibility that foreign powers might obtain access.\u201d Additionally, websites approved by CMS to integrate with the federal marketplace cannot transmit data outside of the U.S. or allow access from outside the country, under the terms of agreements such companies sign to get CMS approval to operate.<\/p>\n CMS did not spell out what consumer information might have been included, but ACA applications can contain information including a person\u2019s name, date of birth, address, and detailed household income information.<\/p>\n Speridian companies were suspended, then reinstated, from the marketplace in prior years over other concerns, including problems with false Social Security Numbers submitted with some TrueCoverage ACA applications in 2018, and for a 2023 effort by Benefitalign to access the federal marketplace\u2019s \u201csoftware testing environment\u201d from India, according to the CMS letter.<\/p>\n In seeking a restraining order against CMS, the companies argue that the agency\u2019s action to suspend them now is arbitrary and capricious and violates its own regulations as well as the due process clause of the Constitution.<\/p>\n The filing calls the Sept. 2 CMS letter explaining the reasons for the suspensions \u201ca post hoc<\/em> justification\u201d that includes a litany of \u201c\u2018concerns,\u2019 suspicions,\u2019 \u2018allegations.\u2019\u201d The filing also asserts \u201cthese intimations of violations are made without evidence of any actual violation.\u201d<\/p>\n The court documents say the suspensions will prevent the companies from participating in the upcoming open enrollment period, harming them and \u201cthe thousands of brokers\u201d and \u201cmillions of consumers who count on brokers\u201d using those websites to sign up for ACA coverage.<\/p>\n The suspension remains in place, the CMS letter says, partly because its concerns have not been allayed by information provided by the companies, but also while the audit is conducted.<\/p>\n CMS has \u201creasonable suspicion, based on credible evidence it has considered,\u201d that the companies were involved in enrolling consumers or changing their coverage without specific permission, the letter stated, noting that such allegations are included in a civil lawsuit<\/a> filed by private sector lawyers in U.S. District Court for the Southern District of Florida.<\/p>\n The firms have previously said the allegations in the civil lawsuit are without merit.<\/p>\n Brokers who have used the suspended websites in the past have other options to enroll clients, including several other websites currently approved to integrate with the federal Obamacare marketplace. Consumers can also go directly to the federal or state ACA websites and enroll themselves or get assistance from call centers associated with those marketplaces.<\/p>\n KFF Health News<\/a> is a national newsroom that produces in-depth journalism about health issues and is one of the core operating programs at KFF\u2014an independent source of health policy research, polling, and journalism. Learn more about KFF<\/a>.<\/p>\nUSE OUR CONTENT<\/h3>\n