MIB Group, Inc. ("MIB") is a membership corporation owned by approximately 400 member life and health insurance companies in the United States, Canada and Caribbean region. MIB's core business (known as MIB’s Underwriting Services or the MIB Checking Service) is sometimes described as an "information exchange" because MIB members contribute underwriting data about insurance applicants to the MIB database that may be useful to other members that later search the database with the authorization of the insurance applicant. Please visit https://www.mib.com/facts_about_mib.html for more information about MIB’s Underwriting Services.
In addition to MIB’s Underwriting Services, MIB also provides subscribing members with access to several ancillary services, as further described below.
Since its establishment in 1902, MIB has been committed to maintaining the confidentiality and security of the information entrusted to it, and to protecting the privacy of the individuals to whom it pertains. This commitment is as important to us today as it was when the organization was founded.
Your privacy is a priority, and we go to great lengths to protect it by acting in accordance with the following principles for each service that MIB offers to its members:
MIB Reports. Through MIB's Checking Service, MIB member companies report limited information (sometimes described as a "brief report") that is significant to underwriting an application for life, health, disability income, critical illness or long-term care insurance. The reports, if any, are brief summaries of one or more medical conditions or other conditions (typically hazardous avocations and adverse driving records) that are reported by the member company in a proprietary and highly confidential coded format. These reports act as alerts to members in the event that you fail to answer application questions fully and accurately as a result of inadvertence or intentional conduct. MIB does not collect, maintain or store any medical records in its Checking Service database such as medical or paramedical examination reports, attending physician statements, lab test results or x-rays. Further, an MIB record does not include the member company's underwriting decision or whether a policy was issued and accepted by the applicant.
Your Knowledge & Consent. MIB's members will not search MIB or report information about you to MIB without first: (i) providing you with the "MIB Pre-Notice" that explains MIB's role in the underwriting process; and (ii) obtaining a signed authorization from you that names MIB as an information source and allows the member to make a brief report to MIB using MIB's proprietary codes. MIB requires its members to take these steps pursuant to MIB's longstanding General Rules. With the exception of data from the U.S. Department of Treasury on "Specially Designated Nationals" (or "blocked persons"), Canada's Office of the Superintendent of Financial Institutions (OSFI) list, and a code that is generated by MIB to represent a high frequency of insurance application activity in the previous seven years, MIB receives the information that is incorporated into its information exchange exclusively from its member life and health insurance companies. In addition, MIB member companies only send such information about you to MIB in the form of MIB’s proprietary codes in order to keep such information confidential and to protect your privacy.
Disclosures by MIB. With your authorization, MIB shares individually identifiable information about you with its member life and health insurance companies (or their service providers who are acting on the member's behalf in the underwriting process), with you directly, and as otherwise required or allowed by law. Generally, MIB is only permitted to release your consumer file to another third party with your authorization or in response to a federal grand jury subpoena or court order (15 U.S.C. Sec. 1681b). However, with respect to investigations relating to terrorism, the Federal Bureau of Investigation ("FBI") and other federal agencies would be allowed access to consumer information at MIB if the FBI could certify that the information would be sought for an investigation to protect against international terrorism or clandestine intelligence activities. Other federal agencies investigating international terrorism might also obtain consumer information, provided they present MIB with a certification that the information would be necessary for the agency's activities. Although MIB is required to release a consumer's information in those circumstances, given the limited nature of the information that MIB actually maintains in its database (i.e, only coded medical information and no financial information), it is extremely unlikely that federal agencies would even request a consumer's MIB file in furtherance of an investigation on international terrorism.
Use of Your Information. If there is any individually identifiable information about you in MIB's Underwriting Services database, it will only be used by a member life or health insurance company to detect and deter insurance fraud or abuse, as described above, or for the member company to perform compliance activities or quality functions. MIB's members are located in the United States, Canada and the Caribbean region; therefore, your information may be sent to or accessed by members (or their service providers) in offshore locations. "Offshore" refers to a location outside of US and Canadian boundaries, whether or not that location is land- or water-based.
Obsolete Reports are Removed. To help ensure that MIB only reports relevant and timely information about individuals in its database, MIB's reports to members will include information (for example, MIB codes) that has been furnished to MIB by a member within the prior 7 years (except as prohibited under applicable law), after which MIB codes are removed from MIB Consumer Files.
Accuracy of MIB Reports. MIB and its member companies are firmly committed to adopting and maintaining procedures that maximize the accuracy, timeliness, and completeness of reports made to MIB.
Free Annual Access to Consumer File. Every consumer should be entitled to know the contents of his or her Consumer File maintained by MIB and to correct any inaccurate or incomplete information that is included in the record. Therefore, you may obtain a free copy of your MIB Consumer File (if any). For more information on how to request a copy of your MIB Consumer File from MIB, please visit: http://www.mib.com/request_your_record.html. For your protection, MIB will collect your full name (including any past names or aliases you might have used), gender, mailing address, telephone number, date of birth, place of birth, occupation and social security number (or Social Identification Number for Canadian residents) before providing your file to you. This information will be collected and maintained securely by MIB and will be used solely to process your request for a copy of your MIB Consumer File. Specifically, the personal information that you provide to MIB will be used only to verify your identity (which may include the use of a third-party identity verification service), to conduct an accurate search of MIB's master data file and to make a reasonable effort to confirm that the search results (if any) actually relate to you.
Your Right to Dispute. If you believe that your MIB Consumer File is inaccurate or incomplete, you may contact the MIB Disclosure Office and request a reinvestigation with the MIB member that reported the information about you to MIB. For more information on how to request a reinvestigation, please visit: http://www.mib.com/how_to_dispute_your_consumer_file.html. In order to initiate a reinvestigation, MIB will collect your full name, address, date of birth, place of birth, your Social Security Number or Social Identification Number (Canada), as well as a description of the information in dispute and the specific reasons why you believe the information is inaccurate or incomplete. This information will be collected and maintained securely by MIB and will be used solely to process your request for a reinvestigation.
MIB also provides its EHR Service to members in the United States for the underwriting of their life, critical illness and disability income insurance policies. The MIB EHR Service provides subscribing members with electronic copies of your medical records (known as “electronic health records”) derived from healthcare organizations and other healthcare providers pursuant to an express authorization that has been signed by you (or your legal representative, if applicable). MIB obtains your electronic health records from certain vendors that also provide services to your health providers.
Your Knowledge & Consent. Members are not authorized to submit search requests to MIB's EHR Service until they have obtained a signed authorization from you that expressly permits the member to request and receive your medical records.
Personal Information Collected. In order to submit a records request to MIB's EHR Service, the personal information listed below will be provided to MIB and the electronic health record vendor(s) in order to retrieve your medical records from your healthcare provider(s):
Date of Birth
Social Security Number
Disclosure of Medical Records to Members. In response to a member's request for your electronic health records, MIB will provide the member company with copies of your electronic health records (if any) that it obtained from MIB's participating electronic health record vendors. Your electronic health records may then be used by the insurance company in the underwriting process, and data from your medical records may be reported to MIB's Checking Service (see above for more information about the MIB Checking Service), all pursuant to your signed authorization.
Short-term Retention of Medical Records. MIB does not retain a copy of your electronic health records for longer than ten (10) days. In those ten (10) days, your electronic health records are retained by MIB solely for processing, debugging and similar administrative purposes. Upon the expiration of such ten (10) day period, your electronic health records are securely destroyed by MIB, but they are retained by the member that requested and received your records (if applicable).
Retention of Personal Identifying Information. MIB retains historical transaction details that may include your name, date of birth and policy number for twelve (12) months. These details are retained solely for administrative purposes and are securely destroyed after twelve (12) months.
To learn whether an MIB member company obtained your electronic health records using MIB's EHR Service, please contact the member company to which you applied for insurance.
In addition to MIB's Underwriting Services and the EHR Service, MIB also provides subscribing members with access to TransUnion's Identity Manager Verification Service (IDMV) (a service provided by TransUnion Risk and Alternative Data Solutions, Inc., "TRADS") for their U.S. life insurance applicants. In other words, when using MIB's services, MIB's members may submit an identity verification inquiry that is sent to TRADS to verify an applicant's identity. By obtaining a TransUnion IDMV report, MIB members verify the identities of their customers in order to ensure the quality of their business, manage identity risk, prevent identity fraud, and comply with their obligations under the USA Patriot Act (anti-money laundering and customer identification programs).2
Use of Reports. MIB’s technical platform is used by members to access IDMV reports and MIB “passes through” the IDMV reports (if any) directly to the requesting member. TransUnion IDMV reports are used solely for identity verification and cannot be used to determine an individual's eligibility for insurance.
Personal Information Collected. In order to obtain an IDMV report from TRADS, the member company may supply TRADS the following:
First, Last Name
Date of Birth
City, State, Zip
Country (U.S. only)
Social Security Number
Short-term Retention. MIB retains the IDMV search inquiry and response data for administrative purposes for no longer than 60 days, after which the information is securely destroyed. MIB does not otherwise retain a copy of the IDMV report, make a record of the identity verification inquiry for your MIB Consumer File or incorporate the identity verification report contents into your MIB Consumer File.
To learn whether an MIB member company obtained an IDMV report under this program, please contact the member company to which you applied for insurance.
MIB also provides subscribing members in the United States with access to Sherlock reports ("Sherlock Reports") (a service provided by Explore Information Services, LLC ("Explore")). Sherlock Reports are used by MIB's members to identify an individual's criminal record history (if any).
Use of Reports. MIB's technical platform is used by members to access Sherlock Reports and MIB "passes through" the Sherlock Reports (if any) directly to the requesting member. Members use the Sherlock Reports to collect criminal history information on individuals who are applying for a life or health insurance policy in the United States. Members use the Sherlock Reports to help determine eligibility for insurance.
Personal Information Collected. In order to obtain a Sherlock Report from Explore, the subscribing member company must provide the following information about you:
First, Middle, Last Name
Date of Birth
Short-term Retention. MIB retains the Sherlock search inquiry and response data for administrative purposes for no longer than 60 days, after which the information is securely destroyed. MIB does not otherwise retain a copy of the Sherlock Report or view its contents.
Rights of Access and Dispute. Explore is a "consumer reporting agency" under the Fair Credit Reporting Act. Therefore, in order to request a copy of your Sherlock consumer file or to dispute the contents of your Sherlock consumer file (if one exists), you may contact Explore at: firstname.lastname@example.org or 1-888-888-0236.
To learn whether an MIB member company obtained a Sherlock Report under this program, please contact the member company to which you applied for insurance, or you can request a copy of your Sherlock consumer file by contacting Explore at the above email address or phone number.
MIB implements and enforces robust security standards and policies through its Enterprise Security Program that are designed to protect the security, integrity and confidentiality of any individually identifiable information. MIB is committed to safeguarding any personal information that it collects and/or maintains to reduce the risk of unauthorized disclosure, modification, or destruction, whether accidental or intentional. To accomplish this, MIB employs administrative, physical and technical safeguards that comply with applicable laws.
Apart from MIB's Underwriting Services, MIB's EHR Service, Sherlock Reports and TRADS' IDMV Services described above, MIB may also from time to time provide services to its member companies that require them to share your personal information with MIB.4 Examples include Protective Value Studies and Cross Check Services, which do not have any role in determining your eligibility for insurance or benefits. From time to time, MIB also provides reports and prepares studies for the insurance industry utilizing information derived from the MIB Underwriting Services database that has been made non-personally identifiable (i.e., it has been de-identified in accordance with applicable law so no individual can be identified by name or other attributes) and aggregated. Because of de-identification, no specific individual's information is (or can be) attributed to him or her, and the de-identified information of many individuals is aggregated and reported as a group. The most prominent example of such a report is the MIB Life Index, which is used as an industry proxy for U.S. insurance application activity and is released monthly to a large nationwide audience. You may rest assured that MIB applies the same safeguards to any personal information that is used to perform these ancillary services in accordance with its mature information security program.
This policy is provided for informational purposes only and the principles set forth in this policy do not create any contractual obligations or terms with, or confer any warranties to, any individual. If you have any questions or comments about these Principles Governing MIB’s Collection and use of Personal Information, please e-mail email@example.com.
Last updated: May, 2019