The CDC added a third measles death to its national dashboard on Wednesday but refused to identify the state where it occurred, citing privacy laws. Legal experts consulted by the Guardian say the justification doesn't hold up. Dorit Reiss, a law professor at UC Law San Francisco, noted that the agency already publishes case counts by state — naming a state where a death occurred reveals nothing about an individual's identity. Lindsay Wiley of UCLA Law agreed, adding that agencies sometimes deploy "overly broad, unwarranted interpretation of privacy protections" when they'd rather not share information that might damage their reputation or agenda. The numbers tell a stark story of institutional dysfunction. Pennsylvania has confirmed five measles deaths, plus a sixth under investigation. The CDC dashboard lists three nationally. The gap is not a rounding error — it's a reporting system that is either broken or being managed. The agency switched in September from the National Notifiable Diseases Surveillance System (NNDSS), which reports deaths quickly and names states, to the National Center for Health Statistics (NCHS), which does neither when numbers are small. No clear reason for the switch has been provided. The outbreak itself is accelerating. Cases grew 8% in a single week to 4,410 confirmed infections this year — nearly double last year's total count. Paul Offit, an infectious diseases physician at the Children's Hospital of Philadelphia, pointed to a 39-year-old woman in Franklin County, Pennsylvania, who died of an acute cardiac event, a known but very rare complication of measles. "When you see something like that, you're looking at the tip of a much bigger iceberg," he said. "Are you really monitoring how many adults are getting infected? I doubt it." Offit raised the question of whether political pressure is shaping the data. HHS Secretary Robert F. Kennedy Jr. and CDC Director Erica Schwartz have reportedly given orders to decrease the measles death count, according to Reuters. The CDC spokesperson who confirmed the privacy rationale did not respond to follow-up questions about which specific laws prevented sharing state-level death data. The operational consequences are immediate. The CDC has offered to send a support team to help Pennsylvania manage its outbreak, but state and local officials now face a trust problem. "You wonder, 'Can you trust them?'" Offit said. "It's really that bad." Former CDC chief medical officer Debra Houry noted that the agency still has access to NNDSS and other reporting systems — the information exists, it's simply not being published. The adult vaccination gap compounds the surveillance failure. Most vaccination requirements operate at the school level, leaving adults who missed childhood doses or whose immunity has waned essentially invisible to public health infrastructure. With the agency's own data now unreliable, the question of who is getting infected — and how many — becomes harder to answer at precisely the moment it matters most. What's happening here is not a privacy problem. It's a transparency problem dressed in privacy language. The switch from a fast, state-level reporting system to a slow, anonymized one, combined with a refusal to explain the change, creates an information vacuum. That vacuum doesn't protect anyone's identity. It protects the institution from accountability while a preventable disease outbreak accelerates.
