Last updated 6 days ago. Our resources are updated regularly but please keep in mind that links, programs, policies, and contact information do change.

Every day across the United States, a vast network operates silently in the background, serving as the nation’s first line of defense against health threats.

This system, known as public health surveillance, is the fundamental engine of public health practice, working to detect, track, and ultimately stop diseases before they spread widely.

The Centers for Disease Control and Prevention, in partnership with health departments at every level of government, sits at the heart of this critical national asset. Public health surveillance is the continuous, systematic collection, analysis, and interpretation of health-related data. This isn’t a static, one-time data grab—it’s a methodical and unending process designed to provide a constant, real-time pulse on the nation’s health.

The ultimate goal is elegantly simple: to provide actionable information that guides public health interventions. As public health experts have stated, “the reason for collecting, analyzing, and disseminating information on a disease is to control that disease.” This principle underscores the entire system’s purpose—it’s not about tracking diseases for academic interest, but about generating intelligence needed to protect communities.

The system operates as a dynamic feedback loop where data informs action, and the results of that action generate new data, allowing the system to constantly learn and adapt to evolving threats.

From Malaria Control to Global Health Guardian

To understand how the CDC tracks diseases today, you need to understand the agency’s history and the unique legal landscape of public health in the United States. The current system isn’t the product of a single grand design but has evolved over decades, shaped by emerging health threats, scientific advances, and the nation’s federalist structure of government.

Humble Beginnings

The institution known today as the global leader in public health had remarkably humble beginnings. The Centers for Disease Control and Prevention was born on July 1, 1946, as the Communicable Disease Center, a small and narrowly focused agency that evolved from the World War II-era Office of Malaria Control in War Areas.

With an initial budget of only $10 million and fewer than 400 employees, its primary mission was to prevent malaria from spreading across the southern United States. This involved the gritty work of waging war on mosquitoes with trucks and sprayers.

The agency’s visionary founder, Dr. Joseph Mountin, advocated for a much broader mission, pushing for the CDC to extend its responsibilities to all communicable diseases. A pivotal moment came in 1949, when Dr. Alexander Langmuir arrived to head the epidemiology division. Langmuir established a formal disease surveillance system that would become the cornerstone of the CDC’s identity.

In 1951, in response to the threat of biological warfare during the Korean War, he created the Epidemic Intelligence Service (EIS). The EIS officers, who became famously known as “disease detectives,” were charged with guarding against ordinary health threats while simultaneously watching for new and emerging diseases.

Using what they called “shoe-leather epidemiology,” these 23 physicians and one sanitary engineer in the first class traveled door-to-door wherever they were needed, gathering surveillance data and making house calls around the world to investigate outbreaks.

Expanding Mission

Throughout the mid-20th century, the CDC’s scope and responsibilities expanded dramatically. It absorbed the venereal disease program in 1957, the tuberculosis program in 1960, and the Foreign Quarantine Service in 1967.

A landmark development occurred in 1961 when the CDC took over responsibility for collecting national notifiable disease data and began publishing the Morbidity and Mortality Weekly Report (MMWR). The MMWR quickly became the agency’s primary and most authoritative channel for disseminating timely surveillance data, scientific findings, and public health recommendations to the medical and public health communities.

The agency’s evolution continued to mirror the nation’s changing health landscape. As the leading causes of death in the United States shifted from infectious diseases to chronic conditions and injuries, the CDC’s mission broadened accordingly.

It became the federal government’s lead agency for disease prevention and health promotion in 1980, and in 1992, its name was officially changed to the Centers for Disease Control and Prevention to reflect its comprehensive public health role, which now includes everything from cancer and heart disease to injury prevention and environmental health.

The Legal Framework: A Collaborative System

The structure of public health surveillance in the United States is a direct consequence of American federalism. Under the U.S. Constitution, states hold the primary authority for protecting the health, safety, and general welfare of their populations. This means that the power to require the reporting of diseases rests at the state and local level.

Healthcare providers, hospitals, and laboratories are mandated by state and local laws—not federal ones—to report cases of specific diseases to their health departments.

The CDC’s role is therefore not one of command, but of coordination, support, and leadership. The agency’s official mission is to “protect America from health, safety and security threats, both foreign and in the U.S.” It accomplishes this by conducting critical science, providing health information, and supporting communities.

The CDC’s legal authority to act is generally triggered under two conditions: when a disease or health threat has interstate implications, or when a state explicitly invites the CDC to provide assistance and consultation.

This legal structure makes the entire U.S. public health surveillance enterprise a massive collaborative partnership. The system operates through the coordinated efforts of the CDC and thousands of state, tribal, local, and territorial public health agencies.

The CDC doesn’t typically collect surveillance data directly from doctors’ offices or hospitals. Instead, it relies on these health departments to collect data under their own legal authority. The CDC’s role is to aggregate this information from across the country, analyze it to detect national trends and multistate outbreaks, disseminate findings, create standardized tools for surveillance, provide technical assistance, and channel federal funding to support surveillance activities.

This federated system has inherent strengths and weaknesses. Local control allows for responses tailored to community needs and fosters local expertise. However, decentralization also creates significant challenges. With over 50 different jurisdictions, each with its own laws, funding levels, and IT systems, achieving a seamless, standardized, and rapid national surveillance system has been a persistent struggle.

The CDC must lead through influence, partnership, and the provision of valuable resources, rather than by top-down decree. Much of the CDC’s modern work, particularly its Data Modernization Initiative, is a strategic effort to overcome this inherent fragmentation by creating common standards, tools, and platforms that make it easier for states to voluntarily participate in a more cohesive and effective national network.

How a Case Travels from Clinic to CDC

The journey of public health data from a single sick individual to a national statistic is a multi-step process that crosses jurisdictional lines and involves a crucial distinction between what is “reportable” and what is “notifiable.”

Let’s follow the path of a hypothetical case of measles, a nationally notifiable disease, to illustrate how the system works.

Step One: The Patient and Provider

A child develops a fever, cough, and a distinctive rash. The parents take the child to their pediatrician. Based on the symptoms and a laboratory test, the doctor diagnoses the child with measles.

Step Two: Mandatory Local/State Reporting

Measles is a “reportable disease” in all 50 states. This means that, by state law, the pediatrician’s office and the laboratory that confirmed the diagnosis are legally required to report this case to their local or state health department.

This report is time-sensitive—often required within 24 hours—and includes personally identifiable information like the child’s name, address, and date of birth. This level of detail is essential for immediate public health action.

The local health department will use this information to launch a case investigation, ensure the child is isolated to prevent further spread, identify and notify people who were exposed (contact tracing), and verify the vaccination status of contacts to prevent a local outbreak.

Step Three: Voluntary National Notification

After the state health department has recorded the case and initiated its local response, it takes the next step in the data pathway. If a disease is on the list of “nationally notifiable diseases,” the state voluntarily sends a case report to the CDC.

This list of approximately 120 conditions is determined annually through a collaborative process between the CDC and the Council of State and Territorial Epidemiologists, ensuring it reflects current public health priorities.

Crucially, the data sent to the CDC is de-identified; it doesn’t contain the child’s name or address. The CDC receives demographic data (like age, sex, race/ethnicity), clinical details, and geographic location (like county and state), but not information that would identify the individual patient.

This national-level data serves a different purpose than the local report. The CDC aggregates these de-identified reports from all states to conduct national-level surveillance: monitoring for trends that cross state lines, detecting multistate outbreaks, evaluating the effectiveness of national vaccination programs, and allocating federal resources.

This distinction between mandatory, identifiable state “reporting” for immediate action and voluntary, de-identified national “notification” for population-level surveillance is a cornerstone of the U.S. system. It reflects the balance between state authority for public health and the federal role in coordinating a national picture of disease threats.

The Modernization Challenge

For decades, the data pathway described above has been plagued by inefficiencies. A staggering amount of public health data has been transmitted using outdated and manual methods, including paper forms, telephone calls, and, most notoriously, fax machines.

This reliance on manual processes is slow, labor-intensive, and prone to human error, creating dangerous delays in a public health crisis where every hour matters.

The COVID-19 pandemic starkly exposed the vulnerabilities of this antiquated system, catalyzing a nationwide push for modernization. The CDC is now leading a multi-year, multi-billion-dollar Data Modernization Initiative to build a more integrated, responsive, and resilient public health data infrastructure for the 21st century.

This initiative aims to replace the slow, manual data pipeline with a high-speed, automated “digital bridge.”

The Modern Data Flow

Stage 1: Clinical Encounter & Diagnosis A person seeks medical care. A healthcare provider or laboratory diagnoses a “Reportable Disease” as defined by state law.

Stage 2: Mandatory Reporting to State/Local Public Health Old Pathway: Manual reporting via fax, phone, mail (slow, error-prone)

Modern Pathway: Automated, near real-time reporting

• Electronic Case Reporting (eCR): Data flows from the provider’s Electronic Health Record directly to the public health agency
• Electronic Laboratory Reporting (ELR): Lab results are transmitted automatically from lab information systems

Data contains personally identifiable information for immediate local action (case investigation, contact tracing, outbreak control).

Stage 3: Voluntary Notification to CDC The state/local health department sends de-identified data for “Nationally Notifiable Diseases” to the CDC’s National Notifiable Diseases Surveillance System.

Data is de-identified (personal information removed) for national-level surveillance (monitoring multistate trends, guiding national policy).

Stage 4: National Analysis & Dissemination CDC aggregates data from all jurisdictions, analyzes it, and disseminates findings through reports like the MMWR and public dashboards like the COVID Data Tracker. This informs national public health strategy and action.

A central goal of the Data Modernization Initiative is to make this modern pathway the standard, not the exception. A key component is the One CDC Data Platform, a new enterprise system designed to serve as a secure, shared workspace where CDC and its partners can access and collaborate on core data sets in an integrated environment.

The CDC’s Surveillance Toolkit: A System of Systems

The CDC’s disease tracking capabilities aren’t monolithic. Rather, the agency operates what is best described as a “system of systems”—a diverse and complementary portfolio of surveillance programs, each designed to monitor a different facet of the nation’s health.

This evolution reflects a sophisticated understanding that protecting public health requires monitoring not just confirmed cases of disease, but the entire ecosystem that influences it, including human behavior, environmental factors, and the earliest pre-diagnostic signals of an emerging threat.

The Foundation: National Notifiable Diseases Surveillance System

The National Notifiable Diseases Surveillance System (NNDSS) is the bedrock of disease surveillance in the United States. Established through a collaboration between the CDC and public health departments, its function is to receive, process, and provide data on diseases that have been designated as “nationally notifiable.”

This list includes approximately 120 diseases and conditions, ranging from classic infectious diseases like measles, tuberculosis, and rabies to foodborne pathogens like Salmonella, sexually transmitted infections like syphilis, and even non-infectious conditions like elevated blood lead levels and carbon monoxide poisoning.

The NNDSS operates on a principle of cooperative exchange. Reporting is mandated by law at the state and local levels, but states and territories voluntarily submit de-identified case notifications to the CDC. Data from 60 jurisdictions—including all 50 states, the District of Columbia, New York City, and several U.S. territories—flows into the system.

The CDC publishes this data in weekly provisional tables and then works with states to reconcile and finalize the data for annual reports.

A key partner in this process is the Council of State and Territorial Epidemiologists, which works closely with the CDC to annually review and recommend which diseases should be on the nationally notifiable list. This ensures the system remains relevant and responsive to emerging health priorities, such as the addition of COVID-19 in 2020.

Early Warning Systems: Detecting Threats Before They Crest

While NNDSS tracks confirmed diagnoses, some of the CDC’s most innovative systems are designed to provide even earlier warnings, detecting the shadow of an outbreak before it fully emerges.

National Syndromic Surveillance Program

This program is like a public health smoke detector. Instead of waiting for a fire (a confirmed diagnosis), it looks for the first wisps of smoke (early symptoms). The National Syndromic Surveillance Program (NSSP) analyzes health data that precedes a formal diagnosis, primarily from thousands of emergency department visits across the country.

Using a secure, cloud-based system called the BioSense Platform and an analysis tool named ESSENCE (Electronic Surveillance System for the Early Notification of Community-based Epidemics), public health officials can monitor for unusual spikes in patient complaints like “fever and cough” or “vomiting and diarrhea” in near real-time.

This “syndromic surveillance” can alert authorities to a potential outbreak—whether from influenza, a foodborne illness, or even a bioterrorism event—days or weeks before laboratory-confirmed reports would become available, buying precious time for investigation and response.

National Wastewater Surveillance System

One of the most significant recent advances in surveillance, the National Wastewater Surveillance System (NWSS) tracks disease at the community level by testing municipal wastewater for pathogens.

People infected with viruses like SARS-CoV-2 (the virus that causes COVID-19), influenza, and Respiratory Syncytial Virus (RSV) shed genetic material from the virus in their feces, often before they even develop symptoms.

By systematically sampling and testing wastewater from treatment plants, the NWSS provides an efficient, anonymous, and powerful early indicator of disease trends. A rise in the viral load in a community’s wastewater can signal that infections are increasing, giving public health officials a heads-up to prepare for a potential surge in clinical cases.

The CDC supports this work through regional Centers of Excellence that foster innovation and provide technical assistance to local partners.

Genetic Detectives: Reading the Blueprint of Disease

Modern surveillance has been revolutionized by the ability to read the genetic code of pathogens, providing an unprecedented level of precision in tracking diseases.

Advanced Molecular Detection and Genomic Sequencing

The CDC’s Advanced Molecular Detection program integrates cutting-edge laboratory technologies, primarily Whole Genome Sequencing, with powerful data analysis and epidemiology. Whole Genome Sequencing determines the complete DNA or RNA sequence—the unique genetic “fingerprint”—of a bacterium or virus.

This detailed blueprint allows scientists to:

• Identify specific variants and mutations, such as the Alpha, Delta, and Omicron variants of SARS-CoV-2
• Track how a pathogen is evolving and spreading through a population
• Determine if a pathogen is resistant to antibiotics or other treatments
• Link cases of illness to a common source with near-certainty, solving outbreaks that were previously unsolvable

PulseNet: The DNA Detective Network

This program is perhaps the most powerful application of genomic sequencing in public health surveillance. Established in 1996 and coordinated by the CDC, PulseNet is a national network of public health and food regulatory laboratories that perform whole genome sequencing on bacteria that cause foodborne illnesses.

When a lab sequences the DNA of a Salmonella, E. coli, or Listeria bacterium isolated from a sick person, it uploads the genetic fingerprint to a national database. PulseNet’s software continuously scans this database for clusters of identical fingerprints.

When multiple people in different states get sick from bacteria with the same DNA fingerprint, it triggers an alarm, signaling a likely multistate outbreak from a contaminated food distributed across the country.

This system has revolutionized the detection and investigation of foodborne outbreaks, making our food supply safer.

Tracking Specific Threats: Tailored Surveillance

Recognizing that different diseases require different monitoring strategies, the CDC operates several major surveillance programs tailored to specific health threats.

U.S. Influenza Surveillance System

Influenza is a constantly moving target, with viruses changing every year. The CDC’s flu surveillance is a comprehensive, multi-pronged system that provides a weekly public report called FluView.

Its key components work together to paint a full picture of flu activity:

Outpatient Illness Surveillance (ILINet): A network of over 3,400 healthcare providers reports the weekly percentage of patient visits for influenza-like illness, defined as fever plus a cough and/or sore throat. This helps gauge the level of flu circulating in communities.

Hospitalization Surveillance (FluSurv-NET): This population-based network monitors laboratory-confirmed, flu-associated hospitalizations in select sites across the country, providing a crucial measure of disease severity each season.

Virologic Surveillance: Public health and clinical labs across the country report which types and subtypes of influenza viruses are being detected. This information is essential for monitoring viral evolution and, most critically, for determining which strains should be included in the next season’s flu vaccine.

National Program of Cancer Registries

Established by the Cancer Registries Amendment Act in 1992, the National Program of Cancer Registries (NPCR) provides funding and technical assistance to support statewide, population-based cancer registries.

These registries collect high-quality, standardized data on every new cancer case, including the type of cancer, the stage at diagnosis, the initial treatment, and patient demographics. This rich dataset, which covers 97% of the U.S. population, is invaluable for monitoring cancer trends over time, identifying populations at higher risk, guiding research priorities, evaluating the effectiveness of cancer control programs, and helping policymakers allocate health resources.

Childhood Lead Poisoning Surveillance

There is no safe level of lead in a child’s blood. The CDC’s surveillance program for childhood lead poisoning funds state and local health departments to track blood lead levels in children.

This system serves a dual purpose. At the individual level, it identifies children with elevated blood lead levels who require medical follow-up and case management. At the community level, it pinpoints geographic areas and populations at high risk, allowing public health officials to target interventions, such as removing lead paint hazards from older housing, to prevent exposure in the first place.

Monitoring Our Habits: Behavioral Risk Factor Surveillance

The CDC recognizes that human behavior is a primary driver of many chronic diseases and injuries. The Behavioral Risk Factor Surveillance System (BRFSS) is the world’s largest continuously conducted telephone health survey system, designed to monitor these critical behaviors.

Each year, BRFSS collects data from more than 400,000 adults across all 50 states and several territories. The survey asks about a wide range of topics, including tobacco use, diet and physical activity, alcohol consumption, use of preventive health services like cancer screenings and vaccinations, and chronic health conditions like diabetes and asthma.

The survey questionnaire has a standardized structure with three parts: a core set of questions asked by all states, optional modules on specific topics that states can choose to add, and state-added questions tailored to local health priorities.

This flexible design provides states with the specific data they need to plan, target, and evaluate their own public health programs—from diabetes prevention initiatives to tobacco control campaigns—while also contributing to a valuable national dataset on the health behaviors of Americans.

The CDC’s Surveillance Toolkit at a Glance

Surveillance in Action: Real-World Case Studies

The true value of public health surveillance isn’t in the data it collects, but in the lives it saves and the illnesses it prevents. The intricate “system of systems” comes to life during a public health crisis, where the ability to rapidly gather and analyze information is paramount.

These case studies demonstrate how different components of the CDC’s surveillance toolkit are deployed to combat diverse health threats. Modern public health success often hinges on data triangulation—the ability to synthesize evidence from multiple, disparate systems to build a complete and actionable picture of a threat.

The Zika Virus Outbreak: Connecting a Virus to Birth Defects

In 2015 and 2016, a large outbreak of Zika virus, a disease transmitted primarily by Aedes mosquitoes, swept through the Americas. While the illness was typically mild in most people, an alarming and tragic pattern began to emerge in areas with active transmission.

To confront the growing threat, the CDC activated its Emergency Operations Center to its highest level on February 8, 2016, mobilizing scientists with expertise in mosquito-borne viruses, reproductive health, and birth defects.

Surveillance as the Key Tool

Surveillance was the critical tool for understanding this new threat. The CDC and its state partners leveraged ArboNET, the national surveillance system for viruses spread by arthropods, to track travel-associated and locally transmitted cases of Zika in the United States and its territories.

More importantly, to investigate the suspected link to birth defects, the CDC established the U.S. Zika Pregnancy and Infant Registry. This new, specialized surveillance system was designed to monitor pregnant women with laboratory evidence of possible Zika infection and to track the health outcomes of their babies.

The Devastating Discovery

The data from this registry provided the definitive evidence that confirmed the world’s fears. Analysis of the registry data established a causal link between Zika virus infection during pregnancy and a devastating pattern of serious birth defects, most notably microcephaly (a condition where a baby’s head is much smaller than expected, indicating arrested brain development) and severe eye abnormalities.

This distinct pattern of anomalies was named Congenital Zika Syndrome. The surveillance data showed that about 1 in 10 pregnancies with laboratory-confirmed Zika resulted in a fetus or infant with these birth defects, with the risk being highest when the infection occurred during the first trimester.

Immediate Public Health Action

This landmark discovery, made possible by rapid and targeted surveillance, drove immediate public health action. The CDC issued urgent travel advisories warning pregnant women to avoid areas with Zika transmission.

The agency fast-tracked the development and deployment of new diagnostic tools, like the Trioplex Real-time RT-PCR Assay, which could test for Zika, dengue, and chikungunya viruses simultaneously.

Finally, the CDC published comprehensive clinical guidance for healthcare providers on how to evaluate and manage infants with congenital Zika exposure, ensuring affected children received the specialized care they needed.

The Zika response is a powerful modern example of how surveillance can uncover a previously unknown disease threat and directly guide a life-saving public health response.

COVID-19: A Global Stress Test for U.S. Surveillance

The COVID-19 pandemic subjected the entire U.S. public health data infrastructure to an unprecedented stress test, laying bare both its latent capabilities and its long-standing, critical weaknesses. The scale, speed, and complexity of the pandemic required the mobilization and adaptation of nearly every surveillance system in the CDC’s toolkit.

Case and Death Tracking

The National Notifiable Diseases Surveillance System was the official channel for case reporting. On April 5, 2020, COVID-19 was officially added to the Nationally Notifiable Condition List.

However, the sheer volume of cases and the reliance on varied reporting methods from states led to significant data lags, particularly in the early stages of the pandemic. To get a more timely read on mortality, the CDC relied heavily on the National Vital Statistics System, which processes death certificate data.

Analysis showed that death certificate data on COVID-19 deaths was up to 13 days more timely than aggregate death counts reported through other channels.

Hospitalization Monitoring

To track the severity of the pandemic and the immense strain on the healthcare system, the CDC rapidly expanded its hospitalization surveillance. The COVID-19-Associated Hospitalization Surveillance Network (COVID-NET) was established as part of the broader Respiratory Virus Hospitalization Surveillance Network.

COVID-NET provided reliable, population-based data on laboratory-confirmed COVID-19 hospitalizations, allowing public health officials to monitor trends by age, race, ethnicity, and underlying health conditions.

Early Warning Indicators

Two innovative systems proved invaluable as early warning indicators. The National Syndromic Surveillance Program provided near real-time data on emergency department visits for COVID-like illness, often signaling a coming wave of hospitalizations.

Even more powerfully, the National Wastewater Surveillance System emerged as a critical tool. By tracking the concentration of SARS-CoV-2 RNA in sewage, the NWSS could detect rising community transmission often days before an increase in positive tests or hospital admissions, providing a forecast of future hotspots.

Variant Tracking

Genomic surveillance became a central pillar of the pandemic response. The CDC organized the SPHERES (Sequencing for Public Health Emergency Response, Epidemiology, and Surveillance) consortium to coordinate and scale up SARS-CoV-2 sequencing efforts across public, private, and academic labs.

This massive effort allowed the CDC to track the emergence and rapid spread of new variants of concern, from Alpha and Delta to Omicron, providing critical information on their transmissibility and potential impact on vaccines and treatments.

Lessons Learned

The pandemic response demonstrated the power of a multi-layered surveillance strategy. However, it also exposed the high cost of a fragmented and chronically underfunded public health data system.

The challenges in rapidly obtaining complete, standardized data from all jurisdictions became the primary catalyst for the CDC’s Data Modernization Initiative, a multi-billion-dollar effort to build the faster, more integrated, and response-ready public health data system the nation needs for future threats.

Solving a Salmonella Mystery with DNA Fingerprinting

This case study from late 2023 and early 2024 provides a textbook example of how modern, integrated surveillance systems work together to rapidly solve a multistate foodborne outbreak.

The Signal

On December 19, 2023, scientists at the CDC’s PulseNet laboratory network detected a troubling signal. The system’s automated software identified a cluster of 13 people across five states who were infected with a genetically identical strain of Salmonella enterica I 4:I:-.

This DNA fingerprint match was the first indication that a widespread outbreak was underway, linked to a common source.

Surveillance in Action

The investigation that followed showcased the power of data triangulation:

Epidemiologic Investigation: State and local health officials interviewed the sick individuals. A common theme quickly emerged: 74% reported eating charcuterie-style meats in the week before they became ill. This was statistically significant when compared to surveys of the general population, making charcuterie a prime suspect.

Innovative Data Use: To zero in on a specific product, investigators took a novel step: they asked patients who shopped at a common national grocery chain for permission to review their shopper card purchase histories. This commercial data provided a direct link, identifying a specific brand of charcuterie sampler as a product purchased by multiple sick people.

Laboratory Confirmation: The final piece of the puzzle came from the Minnesota Department of Agriculture. They collected an unopened package of the suspect charcuterie sampler from the home of one of the sick individuals. They performed Whole Genome Sequencing on the Salmonella found in the meat. The result was a perfect match: the DNA fingerprint of the bacteria in the product was indistinguishable from the DNA fingerprint of the bacteria making people sick across the country.

The Outcome

The combination of genomic data from PulseNet, patient interviews, and commercial shopper card data provided irrefutable evidence pointing to the source. This allowed the U.S. Department of Agriculture’s Food Safety and Inspection Service to work with the manufacturer, Fratelli Beretta, to issue a product recall.

The contaminated product was identified and the recall was initiated just 17 days after the investigation began—approximately one week faster than previous investigations that did not use purchase records. This rapid action, driven by integrated surveillance, undoubtedly prevented many more people from becoming ill.

The investigation ultimately identified 104 cases in 33 states, with 27 hospitalizations but no deaths.

Challenges and the Path Forward

While the CDC’s surveillance systems are powerful tools for protecting public health, they operate within a complex landscape of legal, ethical, and logistical challenges. Navigating individual privacy rights, overcoming systemic hurdles like chronic underfunding, and modernizing outdated technology are ongoing priorities for the CDC and its public health partners.

Privacy and Data Security

Public health surveillance operates on a fundamental ethical balance between the collective good and individual rights. To protect the health of the community, public health authorities need access to personal health information. At the same time, every individual has a right to privacy.

This tension is managed through a robust legal and ethical framework.

HIPAA and Public Health

The primary federal law governing the privacy of health information is the Health Insurance Portability and Accountability Act (HIPAA) of 1996. While HIPAA’s Privacy Rule establishes strong national standards to protect individuals’ medical records, it also explicitly recognizes the critical need for public health activities.

The Rule contains specific provisions that permit covered entities, such as hospitals and laboratories, to disclose protected health information without a patient’s authorization to public health authorities (like state health departments and the CDC) for legally authorized purposes such as disease surveillance, outbreak investigations, and public health interventions.

Furthermore, other laws, like Section 308(d) of the Public Health Service Act, place strict limitations on how the CDC can use and release any data that could potentially identify an individual, ensuring it is used only for the public health purpose for which it was collected.

De-identification Protects Privacy

A key operational principle that upholds this balance is de-identification. As described in the data pathway, the initial report from a provider to the state health department contains personal identifiers necessary for local action like case investigation.

However, when that data is voluntarily forwarded to the CDC for national surveillance, it is stripped of direct personal identifiers like name and street address, protecting patient privacy while still allowing for population-level analysis.

These legal and procedural safeguards are designed to ensure that surveillance can be conducted effectively while respecting the privacy of all Americans.

Systemic Hurdles: Funding, Staffing, and Technology

The most persistent challenges facing the U.S. public health surveillance system are systemic, rooted in decades of inconsistent investment and a fragmented infrastructure.

The Boom and Bust Funding Cycle

Public health officials at all levels consistently cite inadequate, unstable, and inflexible funding as a primary barrier to building and maintaining modern surveillance capabilities. The funding model for public health often follows a “boom and bust” cycle: long periods of flat or declining budgets are punctuated by massive, temporary infusions of supplemental funding in response to a crisis, such as the COVID-19 pandemic or the Zika outbreak.

This reactive funding model makes long-term strategic planning, investment in IT infrastructure, and hiring and retaining skilled staff incredibly difficult. It forces public health agencies to build capacity during an emergency, only to risk seeing it erode once the crisis fades, leaving the nation vulnerable to the next threat.

This cyclical approach is fundamentally at odds with the proactive, “ongoing, systematic” nature of effective surveillance.

CDC Funding Sources

The CDC’s activities are supported by a complex mix of funding streams:

Discretionary Funding: This is the agency’s core operational budget, determined annually by Congress through the appropriations process. In FY2024, this amounted to approximately $8 billion.

Mandatory Funding: These are funds required by law, most notably from the Prevention and Public Health Fund, which was established by the Affordable Care Act to provide dedicated funding for prevention activities. In FY2024, CDC received over $1 billion from this fund.

Grants and Cooperative Agreements: This is the primary mechanism through which the CDC funds its state, tribal, local, and territorial partners to carry out on-the-ground public health work, including surveillance. In FY2023, the CDC obligated nearly $15 billion to state and local jurisdictions, a figure that included both regular budget funds and supplemental COVID-19 funding.

Workforce and Technology Challenges

The consequences of inconsistent funding are felt directly in staffing and technology. Public health agencies frequently face shortages of skilled personnel, such as epidemiologists and data scientists. Simultaneously, they struggle with outdated IT infrastructure.

The continued reliance on manual processes like faxing, coupled with a lack of interoperability between different electronic health record systems and public health databases, creates massive inefficiencies and delays. Smaller and rural providers, in particular, often lack the resources to invest in modern electronic reporting systems, further widening data gaps.

The Data Modernization Initiative

The CDC’s Data Modernization Initiative is a direct and strategic response to these long-standing challenges. By investing in a common technology platform (One CDC Data Platform), promoting the adoption of data standards, and providing funding and technical assistance to state, tribal, local, and territorial partners, the initiative aims to build a more resilient, skilled, and technologically advanced public health ecosystem.

The goal is to move from a fragmented collection of systems to a truly interconnected network, creating a future where, as the CDC envisions, public health data can finally move faster than disease.

Achieving this vision will require not only technological innovation but also the sustained, predictable investment needed to empower the public health workforce and build the robust infrastructure necessary to protect the nation’s health for decades to come.

The surveillance system that protects America operates largely out of sight, but its impact is profound. From the “disease detectives” who investigate outbreaks to the sophisticated computer algorithms that scan genetic sequences for signs of emerging threats, this network represents one of public health’s greatest achievements.

As new challenges emerge—from climate change driving the spread of vector-borne diseases to the constant threat of pandemic influenza—the need for robust, responsive surveillance has never been greater. The investments being made today in modernizing this system will determine how well America can protect itself from the health threats of tomorrow.

The next time you hear about a food recall, a travel advisory, or vaccination recommendations, remember the vast network of scientists, epidemiologists, and public health professionals working behind the scenes to keep us all safe. Their vigilance is our protection, and their data is our early warning system in the never-ending battle against disease.

Our articles make government information more accessible. Please consult a qualified professional for financial, legal, or health advice specific to your circumstances.