Kentucky Families Give the Government Personal Data. Now the Rules for Using It Are Changing.
Kentucky is challenging a federal decision that expands the government's ability to use and share information collected through cash-assistance programs.
When a Kentucky family applies for cash assistance, the state asks for personal information. That can include names, Social Security numbers, birth dates, income, work history, and citizenship or immigration status. Information about children may be included too. Kentucky needs much of this information to decide who qualifies for help and to run the program.
Some of that information also goes to the federal government because Kentucky’s cash-assistance program receives federal funding. The federal government keeps information from state programs in a large database used to oversee them. In June, the agency that runs the federal program changed the rules for what that database can be used for and who may receive information from it.
Kentucky joined a multistate lawsuit challenging those changes on August 3. One of the most important new sharing rules is scheduled to take effect August 11, the same day public comments close. As of Friday afternoon, I found no court order blocking it.
The dispute raises a basic question: When people give personal information to the government for one purpose, how far should the government be allowed to expand the ways it uses that information later?
The government already had the information
Kentucky’s cash-assistance program is called the Kentucky Transitional Assistance Program, or KTAP. It helps low-income families with children pay for basic needs and is funded through the federal Temporary Assistance for Needy Families program. That federal connection is why Kentucky already sends information about people and families receiving assistance to Washington.
Federal officials have long used this information to make sure states follow program rules, measure whether people receiving assistance are working, report results to Congress, and conduct research. Social Security numbers were already being shared in limited circumstances to match TANF records with federal employment records. The database also already allowed some other disclosures.
So the government did not create a new database in June. It expanded what an existing one can do.
The Administration for Children and Families, the federal agency that oversees the program, broadened the official purposes of the database. It said the information can be used for wider reviews of whether states are following all federal TANF requirements, including audits, fraud investigations, and checks of citizenship or immigration status.
The agency also added new information that can come from other parts of government, including records used to verify eligibility. Social Security numbers can be used to retrieve some of that information. The new sharing rule, called Routine Use 10 in the federal notice, allows records to be disclosed to another government agency or organization helping with these reviews. The Department of Homeland Security is specifically named as an example.
Federal officials say these changes will help them make sure people receiving benefits qualify for them and that states are following the law. That is a legitimate government responsibility. Kentucky itself requires KTAP applicants to be U.S. citizens or qualified immigrants.
The concern comes from how much more useful the same information becomes once its approved uses expand. The federal government can bring in information from other sources, match records, and share information through another route.
A database created for administering and overseeing a benefits program can gradually become useful to more parts of government for more kinds of work.
A quiet way government power can grow
There is a name for that kind of expansion: administrative function creep.
Think about giving your phone number to a doctor’s office so it can remind you about appointments. Later, the company changes its rules so other departments can use the same number for other purposes. Nobody had to collect the phone number again. The reach of the organization grew because the rules around information it already possessed changed.
Government databases can work the same way. An agency collects information to do one job, then later adds new purposes, connects the records to other information, or lets more parts of government receive them. Each change may seem technical. Together, they can give government a much broader reach.
That is where function creep can become a method of authoritarian government.
Power expands through ordinary administrative tools instead of a dramatic new law or new enforcement agency.
The warning sign is the widening of government capacity while the boundaries protecting personal information become weaker or harder for the public to follow.
The evidence in this case has clear limits. It does not show that federal immigration officers are already using Kentucky KTAP records to locate people for deportation. It does not show that Kentucky handed the Department of Homeland Security a complete list of everyone receiving KTAP.
What federal documents do establish is narrower. The government expanded the purposes of the TANF data system, added new ways to connect information, and created another route for sharing records with other agencies. One of the agencies specifically named is Homeland Security.
The safeguard under pressure is personal privacy, and the boundary around information people are required to give the government. People should be able to understand why government is collecting their information, who can use it, and what other purposes it may later serve. Those protections become especially important when the records include Social Security numbers, information about immigration status, and data about children.
Kentucky is already part of the system
Kentucky’s connection is direct. The Kentucky Cabinet for Health and Family Services runs KTAP with federal TANF money, and states participating in the program must report information about recipients to the federal government. The federal privacy review says the national database contains personal information on at least one million people.
One important Kentucky detail remains unknown. Federal rules allow states to report information about their entire TANF caseload or, in some circumstances, an approved sample. I have not yet been able to establish which method Kentucky currently uses.
That means we know Kentucky sends information about individual people and families into the federal system, but we do not yet know whether it contains a record for every Kentucky KTAP recipient. We also do not know whether any Kentucky record will actually be shared under the new authority. Those are important unanswered questions for this investigation, not evidence that the federal change has already caused those things to happen.
Kentucky has gone to court over the expansion. Gov. Andy Beshear joined the lawsuit in his official capacity on August 3, arguing with other states that the federal agency exceeded its authority and violated federal privacy and administrative laws. The court has not yet decided those claims.
The lawsuit makes Kentucky more than a bystander in a national fight. Kentucky supplies information into the federal program, and its governor is now asking a federal court to stop the government from using that system in the new ways announced in June.
That leaves two decisions to watch. The Administration for Children and Families can still respond to public comments about the new sharing rule, and the federal court hearing Kentucky’s challenge can decide whether the policy should be stopped while the case proceeds. For now, August 11 remains the scheduled effective date.
What you can do before August 11
The most immediate action is to comment directly on the federal change. The Administration for Children and Families is accepting comments through August 11 on the TANF data system, identified as System 09-80-0375.
A useful comment can ask the agency to draw clear lines around the new sharing authority. Which parts of Homeland Security can receive the records? What information can be shared? Can TANF information be used for immigration enforcement unrelated to deciding whether someone qualifies for assistance? What record will the government keep each time information is disclosed?
Those questions aim at the method itself: expanding the use of information the government already possesses. Clear answers, written limits, and a public record make that expansion easier to see and challenge. Anyone commenting should leave out personal benefit, immigration, medical, or identifying information because the agency says comments will be made public without removing personal information.
If the new rule takes effect, there is a second way to make its use visible. Federal privacy law allows people to request records held about them and, in some circumstances, an accounting of disclosures made from those records. For a current or former TANF recipient, that could turn a broad debate about what government can do into a specific question: Who received my information?
That is the larger warning sign to remember.
When government already has a database, watch closely when officials add new purposes, connect it to new sources of information, or allow more agencies to receive what is inside.
Government power can grow through changes to information people already surrendered, even when no new surveillance system appears.
Further Reading and Sources
Federal notice changing the TANF data system, June 23, 2026
Federal notice setting the August 11 effective date and comment deadline
HHS privacy review of the TANF Data Portal