zlacker

Additionally from the article the data seems limited to identification information and not medical information.

  Language in the agreement says it will allow ICE to access personal 
  information such as home addresses, phone numbers, IP addresses, banking 
  data, and social security numbers. (Later on in the agreement, what ICE is 
  allowed to access is defined differently, specifying just “Medicaid 
  recipients” and their sex, ethnicity, and race but forgoing any mention of IP 
  or banking data.) The agreement is set to last two months. While the document 
  is dated July 9, it is only effective starting when both parties sign it, 
  which would indicate a 60-day span from July 15 to September 15.

>>adolph+(OP)
That doesn't really help. HIPAA covers anything personally identifiable while held by a covered entity. Their only cover is the LE exception.

Just think: If I "only" steal names and address from the psych ward, that's still a breach.