State Health Exchanges Leak Sensitive Patient Data to TikTok and Meta via Ad Trackers

Nearly all 20 state-run health insurance exchanges transmit sensitive personal data—sex, citizenship, race—to major tech platforms through embedded advertising trackers, violating both their stated privacy policies and platform terms of service. Washington state sent applicant demographics directly to TikTok. Remediation by Washington and Virginia after disclosure suggests these trackers operated without technical audits of data transmission patterns, a systemic failure in privacy governance for government digital services.