Senator moves to unredact Optum vulnerability report; committee debates security trade‑offs
Get AI-powered insights, summaries, and transcripts
Subscribe
Summary
Sen. Rasmussen introduced SF3780 to require unredaction of an Optum program‑integrity report paid for by Minnesota taxpayers, arguing legislators need access to policy recommendations; committee members warned that full disclosure could expose actionable vulnerabilities and suggested a moderated approach.
Senator Rasmussen told the committee that the administration contracted with Optum for a program‑integrity assessment and that legislators were given a heavily redacted copy of the deliverable. "When you turn to vulnerabilities in the report, it's all blacked out," Rasmussen said, arguing the state paid seven figures and policymakers need usable recommendations.
Rasmussen offered Senate File 3780 to unredact the report except for proprietary trade secrets so legislators can evaluate policy options to stop fraud. "We want access to this information that taxpayers paid for so we can make policy recommendations this session," he said.
Other members agreed legislators need more information but cautioned against making highly technical vulnerability details public. Senator Wicklund said releasing detailed operational vulnerabilities could amount to publishing a road map for potential criminals: "It basically...doesn't seem like a responsible thing to do with this information," she said.
Committee members discussed alternatives, including (1) requiring the vendor or DHS to produce a version with high‑level recommendations available to legislators, (2) holding a secure, staff‑level briefing to review sensitive details, or (3) redacting only narrowly defined proprietary or security‑sensitive segments rather than blanket black lines. The sponsor moved the bill and the committee recommended it to pass and re‑referred it to the Health and Human Services Committee for further work.