US Support to Ethiopia's Health Sector Should Not Become a Data Giveaway

Jan 17 , 2026.

Two East African capitals have reacted differently to America’s latest offer to pour billions of dollars into their respective public health sector.

In Nairobi, under William Ruto's (PhD) government, after approving the programme, it was compelled to appear before High Court judges, who issued an injunction when campaigners argued that exporting citizens’ medical files to Washington would breach privacy. In Addis Abeba, Health Minister Mekdes Daba (MD) recently signed a memorandum of understanding with the American Ambassador, Ervin Jose Massinga, sealing a five-year package that totals 1.6 billion dollars. No one filed a case.

However, the bargain involves two currencies. The visible one is dollars, with a breakdown of a little over a billion dollars disbursed at the start, another 150 million dollars if targets are met, and an Ethiopian contribution of 450 million dollars from a treasury already parched of hard currency. The money is earmarked for drugs, salaries, surveillance laboratories, cold chains and midwife training. The quieter currency is data.

The federal government is digitising patient charts at speed. Each record can be linked to phone numbers, geolocation tags and even genetic samples. Data outlasts pills and, in the long run, may be worth far more.

Donors have always demanded reports. Lately, a new generation of bilateral deals is mutating beyond routine audits toward a durable, American-centred architecture for data access, system interoperability and pathogen flows. MedicalBrief, a South African outlet, examined a template and found “clauses that would give the U.S. extensive access to country health databases”, including electronic medical records and surveillance systems, with “punitive measures” for non-compliance and the prospect of long-term “data-sharing arrangement[s]”.

According to Health Policy Watch, Ethiopia’s memorandum sits within a suite of five-year pacts promising to modernise electronic records and disease surveillance, goals that American officials describe in language that blends public health with technology leadership. Not surprisingly, health data counts as strategic infrastructure because data confer leverage.

Even stripped of names, patient records can be re-identified. Confined to “public health”, they soon tempt broader uses when analytics firms and geopolitical interests align. A government that lets a partner rummage freely through its servers may later struggle to say no when priorities diverge. Once merged with demographic or economic registers, the mosaic can expose voting habits, income levels or political affinities, insights well beyond the clinic.

Ethiopia is not powerless, however, as its laws governing personal data protection, enacted in 2024, place medical information in the “sensitive” category and require prior approval from a competent authority for cross-border transfers. Signing away practical control of hospital files without that approval could invite a lawsuit and bruise the country's fledgling digital-economy rules. Often, federal officials talk of turning Addis Abeba into a regional tech hub. Prospective investors would not build platforms in places where data governance is an afterthought or an optional extra.

International norms pull in the same direction. The World Health Organisation’s (WHO) latest guidance recommends that individual health data be private by default and that sharing follow principles such as purpose limitation, minimisation, controlled access, audit trails, and accountability. The OECD’s privacy principles emphasise trust and safeguards as conditions for legitimate cross-border transfers. A recent report by the UN Special Rapporteur on health-related data warns that external hosting or outsourcing should not become a back door for unaccountable processing. Against that backdrop, Ministers Mekedes and Ahmed should answer a plain question.

What exactly is being shared, with whom, for what purpose, for how long and under what enforceable limits?

The United States appears to have drafted its own answer. The new memoranda contain benchmarks, strict timelines and “consequences for nonperformance”. Such language is harmless when it refers to vaccine deliveries. It is sharper if “performance” means unrestricted taps on national databases. Conditionality bites hardest in poor countries, for future tranches of American cash could shape decisions far beyond drug procurement, especially if compliance demands data flows that ministries cannot fully control.

That tension is already visible when uncertainty over American financing in 2025 rattled clinics when Washington briefly withheld support. When money wobbles, and deadlines loom, privacy safeguards are the first to fray. And once data pipelines are built, leverage deepens. Vendor ecosystems, technical standards, and even satellite links, Health Policy Watch says, some of which are included in the package, create path dependence. Rip them out later, and hospitals falter.

Evidently, when one side can peer deep inside the other’s systems, it can tighten the taps at will. The spectre of a sour bargain is not hypothetical. In Zambia, a dispute over what American officials called “historic theft” of aid funds prompted a freeze on antiretroviral shipments. Patients suffered. Such asymmetry demands sturdy rules.

Ethiopian officials may not need to spurn the offer, as the package covers support for fighting HIV, tuberculosis, and malaria, maternal care, polio, and outbreak preparedness. These are areas where every dollar saves lives. What they should refuse is the notion that urgency waives rights. A responsible state can accept funding and guard privacy. Indeed, it should if it wishes to be seen as a manager of valuable digital assets.

The starting point is four ground rules drawn from Ethiopia's statute and global practice.

Every cross-border transfer of sensitive data should pass the filter set by Proclamation 1321, with approval spelling out the dataset, purpose, retention and audit. Programme monitoring should rely on aggregated indicators rather than patient-level access. The feature on “trust-by-design”, such as role-based permissions, encryption, and traceable queries, should be built into any American-financed upgrade. Lastly, reciprocity matters. If Ethiopian data help create analytic tools or intellectual property, the country should secure capacity-building, shared rights and access to the finished products.

Transparency will determine whether these rules stick. If the memorandum includes annexes on database access, interested parties, from federal legislators to professional associations and civil society groups, should read them. Clauses fit for purpose will survive scrutiny, and those that are indefensible will collapse, which is precisely what sunlight is for. Publication would also demonstrate institutional maturity, a state confident enough to show its homework. Publishing them would show donors that Ethiopia values data as a globally recognised strategic public asset.

The prize is larger than privacy. Ethiopia hopes to build an artificial-intelligence (AI) industry, with Prime Minister Abiy Ahmed (PhD) recently disclosing his determination to open a public university dedicated to AI. In this new order, data are a form of wealth and should be priced accordingly.

United States is offering billions to strengthen clinics, laboratories and supply chains. That should be welcomed. But if the hidden cost is a pipeline of sensitive records flowing abroad under hazy rules, federal authorities may discover it traded antibiotics for sovereignty.

Kenya’s litigation shows how fast such worries can rise. Nairobi’s activists, armed with privacy law, forced their government to pause. Ethiopia, with a fresher statute and a larger cheque, can do better than hesitate. It can codify conditions, enforce them and hold its partner to the same standard. That would reassure patients whose HIV status, reproductive histories or genetic data sit on clinic servers, and investors who crave predictable rules. It would turn the phrase “data-driven decision-making”, trumpeted by officials, into something sturdier than a slogan.

Trust, also trumpeted, is “a signal of confidence”. Yet, trust is not a policy far better than governance could be. Ethiopia should take the money, keep the safeguards, apply its own law and make every rule legible to its citizens.

PUBLISHED ON Jan 17,2026 [ VOL 26 , NO 1342]