One of the primary values of the California Health Benefit Exchange (the Exchange) is integrity, defined as: “earn[ing] the public’s trust through its commitment to accountability, responsiveness, transparency, speed, agility, reliability, and cooperation.”1 Consistent with this core value, the Exchange, the Department of Healthcare Services (DHCS) and the Managed Risk Medical Insurance Board (MRMIB) have the opportunity to develop workable privacy and security policies for the California Healthcare Eligibility, Enrollment and Retention System (CalHEERS) that build confidence and enhance integrity so that consumers, health plans, and others interacting with CalHEERS trust that personal information collected, accessed and disclosed is handled responsibly. Such policies will need to balance the information needs of the agencies with the rights of individuals to have personal information protected by reasonable privacy and security safeguards.