Article content
The Office of Personnel Management says it is collecting medical records on more than 8 million people, including federal workers, retirees, and their family members. OPM says it will "pseudonymize" some identifying information. Employee unions and congressional Democrats are calling the move an overreach.
You cannot stop an agency from collecting a record it says it already has authority to hold. What you can control is your own paper trail: what you know is being collected, what you asked for, and when you asked. Start there.
Choose your next move
Pick what you want to do first
This changes which questions and records matter most right now.
Start a paper trail before you decide whether to escalate anything.
Interactive toolTurn your focus into a short list of questionsUse your Request my own records and document everything to build specific questions before you call your agency's benefits office or your union.Show the toolHide the tool
Keep legal aid and paperwork meetings focused on deadlines, documents, and next actions.
What OPM Actually Said
The reporting is specific but limited: OPM confirmed it is gathering medical records tied to federal workers and retirees, plus their family members, and said some identifying details will be pseudonymized rather than fully removed. Pseudonymizing a record usually means a name is replaced with a code somewhere in the system, not that the record becomes anonymous or that OPM loses the ability to re-link it to you.
That distinction matters more than the reassurance in the announcement. A pseudonymized record can still be traced back to you internally. Don't treat the word as a guarantee that your information is no longer identifiable.
Personalize this article
Name your agency or retirement system
This gets pulled into your checklist and download so your notes stay specific.
Know Which Privacy Rules Actually Apply
Most retirees assume HIPAA covers every medical record everywhere. It doesn't. HIPAA generally applies to health plans, providers, and clearinghouses, not to a federal personnel agency acting as an employer or benefits administrator. A different law, the Privacy Act of 1974, governs how federal agencies collect and use records tied to an individual, and it's the one worth knowing here.
The Privacy Act gives you the right to find out what a federal agency holds about you and to request a copy. It also requires the agency to publish a notice describing what it collects and why. That notice is public. Ask your benefits office to point you to it instead of taking a press summary at face value.
ChecklistConfirm what's actually being collected about youDo this before you decide whether to escalate anything for your agency.Show the checklistHide the checklist
0 of 4 done.
If you were told to submit medical documentation for FEHB, disability retirement, or a related benefit, that record is a likely source. Retrace where your information has gone and to whom before you assume the worst or dismiss the concern entirely.
Document Your Own Response This Week
You don't need a lawyer to start protecting yourself. You need a clear, dated record of what you asked, what you were told, and what you still don't know. That record is what makes a later complaint or appeal credible instead of a vague grievance.
If your situation genuinely calls for formal action, whether through your union, your agency's inspector general, or a Privacy Act request, having your own documentation ready will save real time. Read What Documents Every Retiree Should Organize Now, Before There Is a Crisis if you haven't already built that baseline file.
TimelineWork through it in orderYou don't have to resolve this in one phone call.Show the timelineHide the timeline
Note the source article, the date, and what you already know about your own federal benefits history for your agency.
Use your question list to ask what's collected, under what authority, and what "pseudonymize" means in practice.
Ask your agency's Privacy Act officer how to request a copy of what's held about you, and get a confirmation in writing.
Add every response, reference number, and promised follow-up date as it comes in.
When to Ask for Help
If your union represents you, this is exactly the kind of issue they exist to press on. If you're not in a union, your agency's inspector general and your Privacy Act officer are the two offices that have to respond to a formal request, even if the answer is slow. Don't confuse a slow response with no response. Keep asking and keep dating your requests.
If a related benefits question is also part of this, for example a VA or Social Security record, keep How to Prepare for a Legal Aid or Benefits Appeal Meeting nearby so you walk into any follow-up meeting organized instead of frustrated.
Save your plan
Save what you've confirmed and asked for so far, before the details get fuzzy.
Common questions
What did OPM say about collecting federal workers' and retirees' medical records?
OPM confirmed it is gathering medical records tied to more than 8 million people, including federal workers, retirees, and their family members, and said it will "pseudonymize" some identifying information. Pseudonymizing a record typically means a name is replaced with a code inside the system, not that the record becomes anonymous or untraceable back to you. Employee unions and congressional Democrats have called the move an overreach.
Does HIPAA protect medical records collected by a federal personnel agency?
Usually not directly. HIPAA generally applies to health plans, medical providers, and clearinghouses, not to a federal agency acting as an employer or benefits administrator. The Privacy Act of 1974 is the law that actually governs how federal agencies collect and use records tied to an individual, and it requires agencies to publish a notice describing what they collect and why.
How do I find out what a federal agency has on file about me?
Ask your agency's Privacy Act officer how to request a copy of your file, and ask your benefits office which OPM system of records covers it. Get everything in writing, including the date you asked and who responded. That documentation is what makes a later complaint or appeal credible instead of a vague grievance.
What should I do this week if I'm worried about this?
Write down what you already know about your own federal benefits history, then ask your benefits office directly what's collected, under what authority, and what "pseudonymize" means for your file. If you want your own records, file a Privacy Act request and keep a dated log of every response and reference number you get back.
