A CMS data center in Baltimore, will host a variety of Health Care Exchange (HEX) Program locations, and contractor sites.
In addition to PII about program applicants, the HEX system will include PII about navigators, agents and brokers; exchange employees and contractors; CMS employees and contractors; insurers that sell coverage through the exchanges; and employers that have workers sign up for health coverage through the new Small Business Health Options Program (SHOP) exchanges.
Beyond contact information and health coverage information, the types of data that might be stored in the system could include information as to whether an individual is in prison, the individual's religion, household income and health status.
The HEX program will keep electronic records on both tape cartridges and in a relational database management system. Any hard copies of records containing PII "will be kept in secure hard-copy file folders locked in secure file cabinets during non-duty hours," officials said.