20+ States Sue to Block Data Sharing of $16B TANF Program Recipients

For legal and compliance practitioners, the lawsuit over TANF data sharing cuts to the core of regulatory privacy, federalism, and the boundaries of agency authority. More than 20 states argue the rule violates the APA and Privacy Act—classic litigation levers that will shape how courts scrutinize data-sharing expansions in an era of digital surveillance. With a prior TANF funding dispute already in the docket, this case offers a real-time study in administrative law, injunctive relief strategy, and the chilling effect on statutory rights.

Over 20 states and the District of Columbia filed a federal lawsuit on August 3, 2026, seeking to block a Trump administration rule that would permit the sharing of sensitive personal data—including Social Security numbers, immigration status, and other details—of millions of recipients of the Temporary Assistance for Needy Families (TANF) program. The coalition, led by New York Attorney General Letitia James, challenges the Department of Health and Human Services’ plan to disseminate this information across government agencies and potentially to private entities, arguing it violates privacy protections and undermines the very purpose of anti-poverty programs. The suit, filed in the U.S. District Court for the District of Columbia, marks the latest flashpoint in a broader battle over the administration’s aggressive scrutiny of public benefit programs under the banner of fraud prevention.

“

TANF is a cornerstone of America’s safety net, providing over $16 billion annually in block grants to states, territories, and tribes.

TANF is a cornerstone of America’s safety net, providing over $16 billion annually in block grants to states, territories, and tribes. These funds are used with significant local discretion for cash assistance, job training, childcare, and other supports for low-income families. The program has long been a target of conservative critiques alleging waste and abuse, and the Trump administration has intensified that focus, linking TANF to immigration enforcement and broader anti-fraud initiatives. The proposed data-sharing rule, which triggered this lawsuit, would allow the federal government to access and redistribute recipient data far beyond the program’s original administrative boundaries, raising immediate red flags under the Privacy Act of 1974, state privacy laws, and constitutional due process concerns.

The legal complaint asserts that the rule exceeds statutory authority, violates the Administrative Procedure Act by being arbitrary and capricious, and threatens irreparable harm by exposing vulnerable populations to discrimination, deportation, and identity theft. The states stress that many TANF recipients are children, and the compelled disclosure of immigration data could deter eligible families from seeking assistance, effectively chilling their statutory rights. This chilling effect is not hypothetical; states point to a drop in enrollment in safety-net programs following the public charge rule changes during the first Trump term. The coalition includes populous states like California, New York, and Illinois, as well as smaller jurisdictions, reflecting a broad Democratic-leaning resistance to the federal overreach.

The lawsuit does not emerge in a vacuum. Earlier in 2026, a federal judge blocked the administration from withholding TANF and other subsidy funds from several Democratic-controlled states after the government cited “reason to believe” the states were providing benefits to undocumented individuals. That dispute, which the government later acknowledged was spurred by news reports of possible fraud, underscores the increasingly punitive posture of the executive branch toward state administration of federal benefits. The data-sharing rule appears to be a complementary effort to gain visibility into state-level decision-making, potentially enabling further funding clawbacks or enforcement actions.

From a regulatory privacy perspective, the case has wide implications. If the rule proceeds, it could set a precedent for other means-tested programs like SNAP, Medicaid, and housing assistance—potentially creating a vast repository of personal data accessible to agencies like Immigration and Customs Enforcement. The states argue that the government failed to conduct a required privacy impact assessment or to justify the wholesale collection of sensitive data with a narrow, evidence-based fraud-finding mission. The suit also raises questions about the involvement of private entities in processing or analyzing the shared data, which could escape public accountability frameworks.