REGULATORY WATCH BRIEF Moderate 44 📂 Lawsuit Filed filed

EFF files lawsuit against CMS for records on Medicare AI prior‑authorization program (WISeR)

The lawsuit highlights privacy and AI‑governance concerns in a federal health program that automates care decisions.

ImpactModerate 44
Type📂 Lawsuit Filed
Statusfiled case open
JurisdictionUS

What happened

EFF sued the Centers for Medicare & Medicaid Services in March to obtain records about the WISeR AI model used for prior authorizations. New documents reveal rushed rollout, vendor non‑compliance, and limited transparency on AI safeguards. The filing calls for stronger legal limits on government use of automated decision‑making.

Why it matters for trust and compliance

  • Its status is filed. The case is still open; the outcome may change what it means.
  • The lawsuit highlights privacy and AI‑governance concerns in a federal health program that automates care decisions.

Who is affected

healthcare government controller processor developer Electronic Frontier Foundation (EFF) Centers for Medicare & Medicaid Services (CMS) Virtix Zyter Innovaccer

Recommended actions

  1. Check that privacy notices describe the practices this addresses.
  2. Map the security requirements to existing controls and close gaps.
  3. Inventory AI or automated decision systems in scope and their assessments.
  4. Confirm handling of sensitive data categories meets the stricter rules.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL