Immigration Health Records and HIPAA: What USCIS Can and Can't See

Product Pricing
Ready to get started? Book a demo with our team
Talk to an expert

Immigration Health Records and HIPAA: What USCIS Can and Can't See

Kevin Henry

HIPAA

June 07, 2026

6 minutes read
Share this article
Immigration Health Records and HIPAA: What USCIS Can and Can't See

Understanding how immigration health records intersect with HIPAA helps you know exactly what USCIS can and cannot review. In most cases, the agency sees only the targeted findings from your Immigration Medical Screening documented on Form I-693—not your complete medical history. This guide clarifies how Protected Health Information moves during the process and where Health Privacy Regulations set boundaries.

Medical Examination Requirements

What the exam covers

The immigration medical examination is a focused screening to assess Health-Related Inadmissibility Criteria under U.S. law. You are evaluated for communicable diseases of public health significance, required vaccinations, substance use disorders, and physical or mental disorders associated with harmful behavior.

  • Tuberculosis screening using current CDC technical instructions (with chest imaging if indicated).
  • Laboratory testing for syphilis and gonorrhea when age- or risk-appropriate.
  • Vaccination assessment to confirm you meet required immunizations or qualify for a waiver.
  • General physical and mental status review tied to admissibility—not a comprehensive annual physical.

What it does not cover

The exam is not designed to diagnose or manage unrelated conditions. Chronic issues like controlled hypertension or well-managed diabetes, by themselves, typically do not affect admissibility unless they intersect with the statutory grounds described later.

Role of Civil Surgeons

Designations and duties

Civil surgeons are physicians authorized to perform immigration medicals inside the United States. They must follow CDC technical instructions and complete the Medical Examination Report and vaccination record on Form I-693 accurately and objectively.

How your results are handled

After the visit, the civil surgeon prepares your Form I-693 in a sealed envelope for USCIS Compliance with filing rules. You may also receive an unsealed copy for your records. Civil surgeons are generally subject to HIPAA and other Health Privacy Regulations and cannot disclose your information except to you, with your authorization, or as permitted/required by law.

Protected Health Information Disclosures

Who sees what

Under HIPAA, your PHI remains with the provider. For immigration purposes, the civil surgeon places relevant findings, test results, and vaccination documentation into the sealed Form I-693 packet and gives it to you. USCIS receives only what is inside that packet and anything else you choose to submit.

Routine vs. non-routine disclosures

Routine disclosures involve handing you the completed I-693 or, with your written direction, sending it where you ask. Non-routine disclosures—like responding to a government subpoena or public health reporting—must meet specific legal standards. Importantly, USCIS does not have direct access to your other medical files or electronic health records.

HIPAA Exceptions for Immigration

When disclosure is allowed without your authorization

  • Required by law: Providers may disclose PHI when a law specifically compels it (for example, certain communicable disease reporting to public health authorities).
  • Public health activities: Reporting tuberculosis or other reportable conditions to health departments.
  • Judicial or administrative processes: Court orders or valid subpoenas with required safeguards.
  • National security or law enforcement: Narrow circumstances defined in the Privacy Rule.

What is not allowed

There is no blanket “immigration” carve‑out in HIPAA. Routine USCIS adjudications rely on the Medical Examination Report you submit. Additional records generally require your written permission or a qualifying legal process. These are the practical HIPAA Authorization Exceptions relevant to most applicants.

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Form I-693 Details

What the form contains

Form I-693, Report of Immigration Medical Examination and Vaccination Record, captures the civil surgeon’s findings that matter for admissibility. It includes your identifying data, vaccination review, TB screening results, syphilis and gonorrhea testing, and notes on any physical or mental disorders and substance use determinations. The civil surgeon classifies conditions (for example, Class A or Class B) when applicable and may attach supporting lab reports.

How it is submitted

The civil surgeon seals the packet; you file it with USCIS as instructed for your case type. USCIS will not accept the form if the envelope is not properly sealed by the civil surgeon. Keep a personal copy before sealing so you can reference what was submitted.

Timing and validity basics

USCIS policies on when the form must be signed and how long it remains valid can change. Always follow the current I-693 instructions you receive from your civil surgeon or with your application packet to avoid delays.

By completing the exam and submitting the sealed I-693, you consent to USCIS using that information to decide your case. If USCIS needs more detail, it may issue a Request for Evidence; providing extra records is your choice unless a law or order compels disclosure.

Limits on agency access

USCIS is not a HIPAA-covered entity. After submission, your I-693 becomes part of your immigration file and is handled under federal privacy rules, not HIPAA. The agency sees only what you submit or what is provided through a qualifying legal process.

Special public health reporting

Some findings—like active tuberculosis or certain sexually transmitted infections—may be reported by your provider to local or state health departments as required by law. These public health disclosures are separate from USCIS and serve community health protection.

The four categories

  • Communicable diseases of public health significance (as defined by health authorities).
  • Lack of required vaccinations.
  • Physical or mental disorders with associated harmful behavior.
  • Current drug abuse or addiction.

Waivers and cures

Some findings can be resolved—through treatment, additional vaccination, or an approved waiver in limited categories. Your civil surgeon’s classification guides what steps, if any, are needed.

Conditions that typically do not impact eligibility

Most non-communicable, well-managed conditions (for example, controlled hypertension) do not trigger inadmissibility on their own. USCIS decisions stay tied to the Health-Related Inadmissibility Criteria shown on your Medical Examination Report.

In short, immigration health records and HIPAA work together to limit what USCIS can see to the targeted results on Form I-693. You control any broader disclosures, and only specific legal processes can expand what is shared.

FAQs

What medical information does USCIS receive under HIPAA?

USCIS receives the sealed Form I-693 with the civil surgeon’s findings and any supporting test reports included in that packet. HIPAA governs your provider’s handling of Protected Health Information; routine immigration adjudication relies on the information you submit, not open access to your full medical history.

How is Form I-693 used in immigration cases?

USCIS uses Form I-693 to determine whether you are inadmissible on health grounds and to confirm vaccination compliance. The Medical Examination Report provides standardized, targeted data so officers can apply the Health-Related Inadmissibility Criteria consistently.

Can USCIS access complete medical records?

No. USCIS cannot freely pull your hospital or clinic files. The agency reviews the I-693 you submit and any additional records you choose to provide or that are produced through a qualifying legal process (for example, a court order).

What protections exist for immigration applicants' health data?

Before submission, HIPAA and state Health Privacy Regulations protect your data at the provider level. After submission, USCIS maintains your records within federal privacy frameworks. The sealed-envelope process, data minimization on Form I-693, and your control over extra disclosures all help limit what is shared.

Share this article

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Related Articles