430 Insurers Share a Coded File About Your Health. Here Is How to Read It.

When you apply for individual life, health, disability or long-term care insurance, the medical details you disclose do not stay with that one company. They are reported, in code, to MIB Group, a membership corporation owned by roughly 430 insurers, founded in 1902 for exactly this purpose. The next insurer you apply to can, with your authorization, read that coded file and compare it against what you told them. The file is governed by the Fair Credit Reporting Act, so you can request it free once a year and dispute anything wrong. In the twelve months to August 2026 the CFPB logged 270 complaints naming MIB Group, which suggests errors are real and worth checking for before you apply anywhere.

What is in an MIB file?

Coded summaries of information from previous individual insurance applications: medical conditions, test results, prescription indicators, and what the industry calls hazardous avocations, such as private flying or scuba diving. MIB also maintains a Disability Insurance Record System covering anyone who has applied for disability income coverage. The codes exist partly to protect privacy in transit between insurers and partly because the file is meant as a fraud check rather than a full medical record.

The purpose is to catch inconsistencies. If you told one insurer about a condition and omit it from the next application, the file flags the gap. It is not the basis for a decision on its own, since underwriting also uses your application, your medical exam, and records from your providers, but it shapes the questions you get asked and the scrutiny you receive.

Do I have a file at all?

Only if you have applied for individual coverage with a member insurer in recent years. Group coverage through an employer generally does not create an MIB record. The CFPB notes that if you have not applied for individual life or health insurance with a company that uses MIB, there will usually be nothing to request. So a blank result is common and means exactly what it appears to mean.

How do I get my report?

Request it online through mib.com or by calling 866-692-6901. You are entitled to one free copy every twelve months, and MIB must deliver it within fifteen days of your request. If an insurer has rated you up, declined you, or asked for more information based on an MIB file, you are entitled to an additional free copy after that adverse action.

One consumer advocacy point worth weighing: the details you provide to make the request become part of the agency's records, and the process is not especially convenient. Many people order the report only when they know it is about to be used, such as before applying for private life, disability or long-term care coverage, and leave enough time to fix errors first.

What if it is wrong?

Request a reinvestigation, which MIB must conduct free of charge under the FCRA. Errors here come in familiar forms: a condition coded incorrectly, a test result misattributed, information belonging to someone with a similar name, or an entry that should have aged off. Because the file influences what other insurers see, an uncorrected error can follow you across several applications. If you are mid-application when you spot a problem, it is usually better to wait for the corrected report before applying elsewhere.

Why does a 1902 database still matter?

Because it is one of the few places where health information is shared between companies with your knowledge and under real rules. Your authorization is required before an insurer can access it, it operates under the FCRA, and you have concrete rights over it. Compare that with the far larger volume of health-adjacent data collected by apps, wearables and websites outside any of those protections, which we set out in are health apps sharing your data. MIB is the regulated version of a problem that mostly happens unregulated.

Where the public layer fits

Being clear: removal services do not touch MIB, and should not, since it is a regulated file you have rights over and insurers need it to function. What is worth thinking about is the identity layer around it. A coded health file is only meaningful once attached to a specific person, and the public people-search profile publishing your name, addresses, age and relatives is the thing that makes any fragment about you attributable. That layer is unregulated, accepts opt-outs, and rebuilds from public records, so keeping it down is ongoing. Consumer Reports found that opt-outs done by hand or by automation cleared roughly 27 percent of exposed listings, while removals handled by real people who monitor and refile reached about 70 percent.

Frequently asked questions

Can an insurer see my MIB file without asking me?

No. Your authorization is required, which is typically part of the application you sign. That is a meaningful protection compared with most data about you, though in practice you cannot apply without granting it.

How long does information stay on file?

Generally a number of years from the application date, commonly cited as around seven, after which entries age off. Check your report for anything older than that, since it may be a candidate for dispute.

Does group health insurance through work create a file?

Usually not. MIB records come from individual applications for life, health, disability, critical illness and long-term care coverage. Employer group plans typically do not involve individual underwriting and do not report.

Should I check it even if I am not applying for anything?

It is free and harmless to your credit, so there is no downside beyond the paperwork. The strongest case for checking is before an application, with enough lead time to dispute and correct anything before an underwriter sees it.