# Expanding risks: Medicaid expansion and data security

## TL;DR

Medicaid expansion under the Affordable Care Act was linked to a significant decrease in consumer fraud and data breaches, contrary to initial concerns.

## Contribution

This study provides novel empirical evidence on the data security effects of Medicaid expansion using a difference in difference approach.

## Key findings

- Medicaid expansion led to a significant decrease in consumer fraud claims.
- There was a notable reduction in data breaches and compromised records after expansion.
- No significant effect on identity theft was observed.

## Abstract

The Patient Protection and Affordable Care Act of 2010 led to the largest expansion of healthcare coverage since the instantiation of Medicare and Medicaid in 1965. Concerningly, prior research suggests this large influx of new patient data across the various and highly dispersed sources may create new potential for malfeasance in the form of consumer fraud and identity theft. We exploit the phased expansion of Medicaid into different states at different times to assess whether this expansion subsequently drove increased fraud and identity theft. Using a difference in difference approach, we explore these data security-related aftereffects of the law. Surprisingly, results indicate a significant decrease in claims of consumer fraud after the expansion of Medicaid, with no robust effect on identity theft. In empirical extensions, we also find a material drop in data breaches and compromised records after the expansion of Medicaid. Taken in sum, these findings suggest that the expansion of Medicaid had a consequential effect on the security of consumer data and created significant positive externalities for consumers.