The CDC has not disclosed the location of the third measles death, citing privacy laws. In a statement to the Guardian, a spokesperson for the Department of Health and Human Services said that "due to privacy laws and legal restrictions, NCHS [the National Center for Health Statistics] cannot identify a state or provide additional details about the third individual." The spokesperson did not respond to follow-up questions about which specific laws or restrictions prevented the information from being shared.
Legal experts disputed the reasoning. Dorit Reiss, a professor of law at UC Law San Francisco, said: "I don't buy it. Naming a state won't be giving personal details, and they give the number of cases in each state." Reiss added there was "nothing to prevent giving numbers of deaths in each."
Lindsay Wiley, professor of law and faculty director of the Health Law and Policy Program at UCLA Law, noted that the CDC is not governed by HIPAA but by the Federal Privacy Act, which usually prohibits disclosing government records about specific individuals. "But this general prohibition only applies to information that reveals an individual's identity," Wiley said. "It's hard to see how identifying the state where a death occurred would allow the public to identify the patient." Wiley added that it is "not unheard of" for agencies to use an "overly broad, unwarranted interpretation of privacy protections to decline to share information that they prefer not to share anyway, because it may be seen as damaging to their reputation or agenda."
The CDC switched in September to using the National Center for Health Statistics rather than the National Notifiable Diseases Surveillance System, which typically reports deaths quickly along with the state of occurrence. The agency has not provided a clear reason for the change. Debra Houry, former chief medical officer at the CDC, said that when only a few deaths have occurred, NCHS usually does not say where they are happening, which is one weakness of using that system. Houry noted that the agency still has access to other reporting systems to know which state has deaths.
Pennsylvania has reported a total of six deaths from measles, with the most recent still under investigation by state officials, but the CDC dashboard lists only three. The agency has not explained the delay. Paul Offit, an infectious diseases physician at the Children's Hospital of Philadelphia, said the secrecy made it hard to understand risk levels. "You'd like to know what the activity is in your state," Offit said. He questioned whether the lack of transparency was "coming from the top" after reports that HHS Secretary Robert F. Kennedy Jr. and CDC Director Erica Schwartz had given orders to decrease the measles death count. Offit also expressed doubt about the accuracy of case numbers and said the decision not to include all deaths was "notable" with wide-ranging consequences.
