Can Government Agencies Share Your Personal Information with Immigration Authorities?

Imagine applying for a government benefit.

You provide your name, address, date of birth, family information, and other documents because the agency says it needs them to process your application.

Months later, you hear that government agencies may share information with immigration authorities.

A question naturally follows:

Can information you gave to one government agency be shared with immigration authorities?

The answer is sometimes—but not automatically, and not under one single nationwide rule.

The legality of information sharing can depend on:

• Which government agency collected the information

• Whether the record is maintained by a federal, state, or local agency

• What type of information is involved

• The purpose for which it was collected

• Whether the record is covered by the federal Privacy Act

• Whether a published routine use permits disclosure

• Whether another federal statute authorizes or requires disclosure

• Whether special confidentiality rules apply

• Whether the information is sought through a subpoena, court order, or another lawful process

The issue is especially important for people concerned about immigration enforcement, public benefits, government records, and personal privacy.

This guide explains what U.S. law actually says—and, just as importantly, what the law does not say.

Key Takeaways

• There is no blanket rule making every piece of government-held personal information confidential.

• The federal Privacy Act of 1974 regulates certain records maintained by federal agencies in a "system of records."

• The Privacy Act generally restricts disclosure of covered records without consent unless an exception applies.

• One important exception involves a routine use that is compatible with the purpose for which the information was collected and has been properly published.

• Federal agencies can also disclose information under other statutory exceptions or legal authorities.

• State and local government records are not automatically governed by the federal Privacy Act in the same way federal agency records are.

• DHS has its own privacy policies and systems governing how personally identifiable information is handled.

• Certain immigration-related records receive additional confidentiality protection under 8 U.S.C. § 1367, particularly information connected with certain VAWA, T, and U cases.

• Privacy rights can differ according to a person's immigration status and the particular federal system involved.

• A person should not assume that submitting information to one agency guarantees that another government agency can never obtain it.

1. Why Does the Government Collect Personal Information?

Government agencies collect personal information because they need it to perform legally authorized functions.

For example, an agency may need information to:

• Process an application

• Determine eligibility for a program

• Verify identity

• Maintain official records

• Investigate fraud

• Administer benefits

• Enforce laws

• Carry out another statutory responsibility

Depending on the agency and program, information can include:

• Full name

• Date of birth

• Address

• Social Security number

• Identification numbers

• Family information

• Employment information

• Financial information

• Immigration information

• Supporting documents

But there is an important distinction:

The fact that an agency lawfully collected information does not necessarily mean that the information can be freely used for every possible government purpose.

For federal records covered by the Privacy Act, the law establishes rules concerning collection, maintenance, use, disclosure, and access.

The purpose for which information was collected can therefore matter.

2. Can Government Agencies Share Personal Data?

Sometimes.

But the answer is not simply "yes" or "no."

For federal records covered by the Privacy Act, 5 U.S.C. § 552a generally restricts an agency from disclosing a record contained in a system of records to another agency or person without the individual's written request or consent, unless an exception applies.

One important exception is disclosure for a qualifying routine use.

A routine use must be compatible with the purpose for which the information was collected and must be described in the agency's published system-of-records notice.

Other exceptions can also apply.

For example, the Privacy Act contains exceptions involving:

• Agency employees with a need for the record

• Certain disclosures required under the Freedom of Information Act

• Routine uses

• Certain law-enforcement circumstances

• Congressional functions

• Court-related matters

• Health or safety emergencies

• Other circumstances specified by statute

Therefore, saying "the Privacy Act prevents the government from sharing your information" is too broad.

A more accurate statement is:

The Privacy Act restricts certain disclosures of certain federal records, but it contains significant exceptions and does not cover every government record.

3. What Is a "System of Records"?

The Privacy Act does not cover every piece of information held by the federal government in exactly the same way.

A key concept is the "system of records."

Under 5 U.S.C. § 552a, a system of records is a group of records under an agency's control from which information is retrieved by an individual's name or another identifying particular.

That distinction matters.

If information is not maintained and retrieved in a way that falls within the statutory definition, the Privacy Act's disclosure rules may not apply in the same manner.

This is one reason it is dangerous to make a blanket statement such as:

"All government databases are protected by the Privacy Act."

They are not.

4. What Is a Routine Use?

A routine use is one of the most important concepts for understanding federal information sharing.

The Privacy Act defines routine use as a use of a record for a purpose that is compatible with the purpose for which the record was collected. Agencies are required to publish routine uses for their systems of records.

This means that a person should pay attention to the Privacy Act Statement and related notices associated with the government program.

For example, a government application may explain:

• Why information is being collected

• What authority permits the collection

• Whether providing information is mandatory or voluntary

• How the information may be used

• What routine disclosures may occur

These notices can provide important clues about how the agency is permitted to handle the information.

5. Understanding the Privacy Act of 1974

The Privacy Act of 1974, codified principally at 5 U.S.C. § 552a, is one of the central federal statutes governing personal information maintained by federal agencies.

Among other things, the statute regulates:

• Maintenance of records

• Disclosure

• Access

• Amendment

• Accuracy

• Agency recordkeeping practices

The law also requires federal agencies to publish information about their systems of records, including categories of records and the routine uses of those records.

But the Privacy Act Has Limits

The Privacy Act does not mean:

"The government can never share your information."

Nor does it mean:

"Every government employee needs your permission before accessing any record."

The statute contains numerous exceptions.

For example, disclosure can occur within an agency when an employee has a legitimate need for the record in performing official duties. Other statutory exceptions can also permit disclosure.

The exact legal analysis therefore depends on the record and the circumstances.

6. Can Immigration Authorities Access Government Records?

They may be able to obtain certain information through lawful channels.

Immigration authorities may have access to information from:

• Immigration records

• DHS systems

• Law-enforcement records

• Court records

• Other government databases

• Information-sharing arrangements

• Lawful requests or investigative processes

But this does not mean that immigration authorities automatically have unlimited access to every government database.

Different agencies maintain different systems.

Different records have different rules.

And some information is subject to special confidentiality protections.

DHS documents, for example, describe systems in which information sharing among DHS components is controlled through access restrictions, privacy safeguards, and need-to-know principles.

7. What About State and Local Government Records?

This is an important distinction that is frequently missed in online discussions.

The federal Privacy Act primarily regulates records maintained by federal agencies.

It does not automatically impose the same rules on every state or local government record.

State and local agencies may instead be governed by:

• State privacy statutes

• State public-records laws

• State confidentiality laws

• Local regulations

• Federal funding conditions

• Agency policies

• Intergovernmental agreements

• Other federal statutes

Therefore, if someone wants to know whether a state agency can share information with federal immigration authorities, the analysis may require looking at state law as well as federal law.

There is no universal rule that every state agency must either share—or refuse to share—information with immigration authorities.

8. Special Immigration Confidentiality Protections

There is an especially important exception to broad discussions about immigration information.

Certain immigration-related records are protected by 8 U.S.C. § 1367.

This statute establishes confidentiality protections for information relating to certain victims and applicants for immigration relief, including certain:

• VAWA cases

• T nonimmigrant cases

• U nonimmigrant cases

• VAWA-related immigration benefits

The statute generally restricts unauthorized disclosure of covered information and contains specific exceptions.

USCIS guidance explains that these protections are designed to prevent information from being disclosed in ways that could expose protected individuals or their families to harm.

Why Does This Matter?

Suppose a person is seeking immigration protection because of domestic violence or another qualifying crime.

Allowing information about the person's application, location, or identifying details to reach the alleged perpetrator could create serious safety concerns.

Congress therefore created specific confidentiality rules for covered cases.

These protections are not the same thing as the general Privacy Act.

That distinction is extremely important.

9. 8 U.S.C. § 1367 Has Exceptions

Even special confidentiality rules are not absolute.

Section 1367 includes exceptions allowing certain disclosures in circumstances involving, among other things:

• Legitimate law-enforcement purposes

• Judicial review

• Certain benefits determinations

• National-security purposes

• Other circumstances identified by statute

The law requires confidentiality to be maintained in specified circumstances.

The statute also provides for disciplinary consequences and civil monetary penalties for certain willful violations.

USCIS updated its policy guidance in December 2025 concerning the scope and handling of these confidentiality provisions. The update addressed VAWA, T, and U-related confidentiality, safe-address procedures, and related case handling.

10. Does the Privacy Act Protect Noncitizens?

This question is more complicated than many articles suggest.

The Privacy Act's statutory definition of "individual" generally refers to a U.S. citizen or lawful permanent resident.

However, DHS has policies that can extend certain administrative Privacy Act protections to people regardless of citizenship or immigration status in particular circumstances.

DHS's current PII directive states that, as an administrative matter, DHS implements certain Privacy Act provisions—including access, amendment, accounting of disclosures, safeguarding, and nondisclosure provisions—for certain individuals regardless of citizenship or immigration status, subject to applicable law. The directive also makes clear that this policy does not create or modify legally binding Privacy Act rights for people who are neither U.S. citizens nor lawful permanent residents.

This distinction is crucial.

Statutory protection and agency privacy policy are not always the same thing.

A person should therefore avoid assuming:

"I am a noncitizen, so I have no privacy rights."

But they should also avoid assuming:

"The Privacy Act gives me exactly the same enforceable rights as a U.S. citizen in every federal system."

The actual answer depends on the agency, record system, applicable statute, and circumstances.

11. Can Immigration Authorities Obtain Information Through a Court Order?

Government agencies can sometimes obtain information through formal legal processes.

Depending on the type of information and proceeding, this may involve:

• Subpoenas

• Court orders

• Warrants

• Administrative requests

• Statutory information-sharing authority

• Other lawful investigative mechanisms

The legal requirements depend heavily on the type of record.

A court order also does not automatically eliminate every confidentiality protection.

Some federal statutes specifically restrict disclosure even in certain legal proceedings or require information to be handled confidentially.

For example, 8 U.S.C. § 1367 expressly addresses disclosures connected with judicial review while preserving confidentiality requirements.

12. Constitutional Privacy Rights

The U.S. Constitution does not contain a single provision stating:

"Every person has a general right to keep all personal information private from the government."

Instead, constitutional privacy protections arise from several constitutional provisions and judicial doctrines.

The Fourth Amendment

The Fourth Amendment protects against unreasonable searches and seizures.

It has become increasingly important in cases involving:

• Digital information

• Location data

• Electronic records

• Government surveillance

• Communications

But Fourth Amendment doctrine does not mean that every government acquisition of information is automatically a "search."

The legal analysis depends on the circumstances and the type of information involved.

Due Process

The Fifth and Fourteenth Amendments also provide due-process protections in appropriate circumstances.

However, due process is not a general government-data privacy statute.

The existence of a privacy concern does not automatically establish a constitutional violation.

13. Real-World Examples

Let's make the issue easier to understand.

Example 1: Applying for a Government Benefit

Imagine Maria applies for a government program.

She provides:

• Her name

• Address

• Household information

• Income information

• Identification documents

Later, she becomes concerned that immigration authorities could obtain the information.

Can they?

There is no universal answer.

The analysis may depend on:

• Which agency collected the information

• Whether the agency is federal, state, or local

• The system in which the record is maintained

• The privacy notice

• Applicable routine uses

• Other statutory authority

• Any specific information-sharing agreement

• Whether another confidentiality law applies

Therefore, "I gave it to a benefits agency, so immigration authorities can never see it" is too broad.

But so is:

"All benefits applications are automatically shared with immigration authorities."

Neither statement is universally accurate.

14. Example 2: Immigration Applications

Suppose a person files an immigration application with USCIS.

The information may include:

• Identity documents

• Address information

• Family information

• Employment history

• Supporting evidence

Immigration records are subject to specific privacy and confidentiality rules.

And some categories of cases have additional statutory confidentiality protections.

For example, information covered by 8 U.S.C. § 1367 receives special protection in qualifying VAWA, T, and U-related cases.

Therefore, the privacy analysis can be very different depending on the type of immigration filing.

15. Example 3: Information Shared Between Federal Agencies

Federal agencies sometimes exchange information as part of authorized government functions.

DHS privacy documentation describes information-sharing arrangements between DHS components and explains that access can be restricted based on authorized roles and need-to-know principles.

But the existence of an information-sharing system does not itself mean that every employee can freely access every record.

The legal authority, purpose, system of records, permissions, and applicable privacy rules remain important.

16. Example 4: State or Local Records

Imagine a person gives information to a city or state agency.

That record may not be governed by the federal Privacy Act merely because the information could eventually be relevant to immigration enforcement.

Instead, the analysis may involve state law and the specific agency's policies.

This is why a question such as:

"Can my state's benefits agency share information with ICE?"

cannot be answered accurately without identifying the state and the particular program.

17. What Are the Risks of Improper Disclosure?

Improper disclosure of personal information can have serious consequences.

Identity Theft

Exposed personal information can potentially facilitate fraud or identity theft.

Safety Risks

For protected immigration victims, unauthorized disclosure may create physical or safety risks.

USCIS specifically recognizes the danger that inappropriate disclosure can expose protected victims and their family members to harm.

Immigration Consequences

In some situations, disclosure may affect a person's immigration matter or create significant legal concerns.

The exact consequences depend on the information involved and the applicable law.

Loss of Trust

People may become reluctant to use government programs if they believe their personal information will automatically be shared for unrelated purposes.

That is one reason privacy rules and disclosure notices matter.

18. How Can You Protect Your Personal Information?

You cannot always control what a government agency is legally entitled to collect or share.

But you can take practical steps.

1. Read the Privacy Act Statement

When a federal agency requests personal information, look for the accompanying privacy statement.

Pay attention to:

• Authority for collection

• Principal purpose

• Routine uses

• Whether disclosure is mandatory or voluntary

• Consequences of refusing to provide information

These details can tell you much more than a generic privacy policy.

2. Ask Why the Information Is Required

Before providing additional information, ask:

Is this information actually required for my application?

If the agency requires it, comply with the applicable requirements.

But do not casually volunteer sensitive information that is unrelated to the requested process.

3. Keep Copies of Your Records

Save copies of:

• Applications

• Government notices

• Privacy statements

• Confirmation receipts

• Emails

• Supporting documents

These records may become important if a dispute later arises.

4. Correct Errors

Federal Privacy Act systems can provide certain rights to request access to or amendment of records, although the scope of those rights depends on the person, agency, system, and applicable exemptions.

5. Understand Which Agency Holds the Record

Before asking about your privacy rights, identify:

Who actually has the record?

Is it:

• USCIS?

• ICE?

• CBP?

• DOJ?

• A state agency?

• A county?

• A city?

• A court?

The answer can completely change the legal analysis.

19. Can You Request Your Government Records?

Sometimes.

Depending on the agency and the applicable law, a person may have options under:

• The Privacy Act

• The Freedom of Information Act (FOIA)

• DHS administrative procedures

• State public-records laws

However, access is not necessarily unlimited.

Some records may be exempt or subject to restrictions.

DHS explains that people who are not covered by Privacy Act or Judicial Redress Act rights may, in some circumstances, request records through FOIA.

The appropriate request mechanism therefore depends on the agency and the record.

20. Common Mistakes People Make

Mistake 1: Assuming Every Government Record Is Private

Different records have different rules.

The federal Privacy Act does not automatically cover every government record.

Mistake 2: Assuming the Privacy Act Blocks All Sharing

It doesn't.

The statute contains numerous exceptions, including routine uses and other authorized disclosures.

Mistake 3: Assuming Immigration Authorities Have Unlimited Access

They do not simply receive unlimited access to every government database.

Access depends on legal authority, agency systems, permissions, and applicable restrictions.

Mistake 4: Assuming State Agencies Follow the Federal Privacy Act

State and local agencies can be subject to different laws.

Always check the law governing the particular agency.

Mistake 5: Ignoring Special Immigration Confidentiality Rules

If a case involves VAWA, T, or U protections, 8 U.S.C. § 1367 may be critically important.

Mistake 6: Assuming Noncitizens Have No Privacy Protections

That is also too broad.

Federal statutory rights and agency privacy policies can differ, and other laws may independently protect certain information.

Mistake 7: Providing False Information

Never intentionally provide false information to a government agency.

A privacy concern does not give someone permission to submit inaccurate information.

21. Frequently Asked Questions

Can a government agency share my personal information with immigration authorities?

Sometimes, but not automatically.

For federal records covered by the Privacy Act, disclosure is generally restricted unless the individual consents or an applicable exception permits disclosure. Routine uses and other statutory exceptions can authorize certain disclosures.

Does the Privacy Act protect every government record?

No.

The Privacy Act primarily regulates qualifying records maintained by federal agencies in systems of records. State and local records may instead be governed by different laws.

Can state agencies share information with federal immigration authorities?

It depends.

The answer may involve state law, federal law, agency policies, agreements, and the particular program involved.

Can immigration authorities access federal agency databases?

They may obtain or access information through authorized systems and legal processes, but access is governed by applicable law, agency rules, system permissions, and privacy requirements.

Are immigration records always confidential?

No—not every immigration record has identical confidentiality protection.

Some records are subject to general privacy rules, while particular categories of immigration information may receive additional statutory confidentiality protection.

What is 8 U.S.C. § 1367?

It is a federal statute that provides special confidentiality protections for certain information relating to specified immigration victims and applicants, including qualifying VAWA, T, and U cases. It also contains exceptions and penalties for certain violations.

Does § 1367 protect every immigrant?

No.

Its confidentiality protections apply to the categories of people and information identified by the statute and implementing guidance.

It should not be confused with a general immigration privacy law covering every noncitizen.

Can noncitizens use the Privacy Act?

The statutory definition of "individual" in the Privacy Act generally covers U.S. citizens and lawful permanent residents, but DHS has administrative policies extending certain Privacy Act-related protections to some individuals regardless of citizenship or immigration status. Other laws may also provide protection.

Can I find out whether the government has my information?

Potentially.

Depending on the agency and the record, you may have options under the Privacy Act, FOIA, or other procedures.

What if I believe a government agency improperly disclosed my information?

You may consider:

• Contacting the agency's privacy office

• Reviewing its complaint or redress procedures

• Requesting relevant records

• Documenting the disclosure

• Consulting a qualified attorney

The appropriate remedy depends on the specific law and facts.

Should I talk to an immigration lawyer?

If the information-sharing issue could affect your immigration status, pending application, protection claim, employment, family, or personal safety, consulting a qualified immigration or privacy attorney may be appropriate.

Conclusion

The question "Can the government share my information with immigration authorities?" does not have one universal yes-or-no answer.

The real question is:

What information is involved, which agency holds it, what law governs the record, why was it collected, and what legal authority permits or restricts disclosure?

For federal records covered by the Privacy Act, disclosure is generally restricted unless consent or an applicable exception exists. Routine uses, statutory exceptions, and other legal authorities can permit certain disclosures.

State and local records require a separate analysis.

And certain immigration cases have additional confidentiality protections. Under 8 U.S.C. § 1367, qualifying information involving VAWA, T, and U-related immigration relief is subject to special restrictions on disclosure, with statutory exceptions.

The most important lesson is therefore not to assume either extreme:

Government agencies do not have unlimited freedom to share every record—but neither is every government record automatically confidential.

If your situation involves immigration status, a pending application, government benefits, domestic violence, trafficking, or a suspected improper disclosure, the specific facts matter.

When the consequences are serious, obtaining advice from a qualified attorney can help you understand which privacy and immigration rules actually apply to your situation.

Legal Disclaimer

This article is provided for general educational and informational purposes only. It is not legal advice and does not create an attorney-client relationship.

Federal, state, and local privacy laws can differ. Government information-sharing practices and agency policies may also change. The application of the Privacy Act, immigration confidentiality provisions, FOIA, state privacy laws, and constitutional protections depends on the specific facts and records involved.

Readers with a specific privacy or immigration concern should consult a qualified attorney or the relevant government agency before relying on this article.