NPPES and NPI Privacy Information


What is a cookie?

A cookie is a small piece of information that is sent to your browser -- along with a Web page -- when you access a Web site. There are two kinds of cookies. A session cookie is a line of text that is stored temporarily in your computer's memory. Because a session cookie is never written to a drive, it is destroyed as soon as you close your browser. A persistent cookie is a more permanent line of text that gets saved by your browser to a file on your hard drive.

NPPES use of cookies

NPPES uses session cookies only. We do not use any persistent cookies. You will need to have session cookies enabled to visit On, session cookies are used to store system specific information about your application. If you do not have session cookies enabled, you will not be able to submit your application on-line. If you have session cookies enabled, this system specific information will be saved for the entire visit to the site. This information will not be saved between site visits.

Privacy Act Statement

Section 1173 of the Social Security Act authorizes the adoption of a standard unique health identifier for all health care providers who conduct electronically any standard transaction adopted under 45 CFR 162. The purpose of collecting this information is to assign a standard unique health identifier, the NPI, to each health care provider for use on standard transactions. The NPI will simplify the administrative processing of certain health information. Further, it will improve the efficiency and effectiveness of standard transactions in the Medicare and Medicaid programs and other Federal health programs and private health programs. The information collected is entered into a system of records called the National Plan and Provider Enumeration System (NPPES), HHS/CMS/OIS No. 09-70-0008. In accordance with the NPPES Data Dissemination Notice (CMS-6060), published May 30, 2007, certain information that you furnish will be publicly disclosed. The NPPES Data Dissemination Notice can be found at

Failure to provide complete and accurate information will delay processing. In addition, you may experience problems being recognized by insurers if the records in their systems do not match the information you furnished on the form. Information may be disclosed under specific circumstances to:

  1. The entity that contracts with HHS to perform the enumeration functions, and its agents, and the NPPES for the purpose of uniquely identifying and assigning NPIs to providers.
  2. Entities implementing or maintaining systems and data files necessary for compliance with standards promulgated to comply with title XI, part C, of the Social Security Act.
  3. A congressional office, from the record of an individual, in response to an inquiry from the congressional office made at the request of that individual.
  4. Another Federal agency for use in processing research and statistical data directly related to the administration of its programs.
  5. The Department of Justice, to a court or other tribunal, or to another party before such tribunal, when
    • a. HHS, or any component thereof, or
    • b. Any HHS employee in his or her official capacity; or
    • c. Any HHS employee in his or her individual capacity, where the Department of Justice (or HHS, where it is authorized to do so) has agreed to represent the employee; or
    • d. The United States or any agency thereof where HHS determines that the litigation is likely to affect HHS or any of its components is party to litigation or has an interest in such litigation, and HHS determines that the use of such records by the Department of Justice, the tribunal, or the other party is relevant and necessary to the litigation and would help in the effective representation of the governmental party or interest, provided, however, that in each case HHS determines that such disclosure is compatible with the purpose for which the records were collected.
  6. An individual or organization for a research, demonstration, evaluation, or epidemiological project related to the prevention of disease or disability, the restoration or maintenance of health, or for the purposes of determining, evaluating and/or assessing cost, effectiveness, and/or the quality of health care services provided.
  7. An Agency contractor for the purpose of collating, analyzing, aggregating or otherwise refining or processing records in this system, or for developing, modifying and/or manipulating automated information systems (ADP) software. Data would also be disclosed to contractors incidental to consultation, programming, operation, user assistance, or maintenance for ADP or telecommunications systems containing or supporting records in the system.
  8. An agency of a State Government, or established by State law, for purposes of determining, evaluating and/or assessing cost, effectiveness, and/or quality of health care services provided in the State.
  9. Another Federal or State agency
    • a. As necessary to enable such agency to fulfill a requirement of a Federal statute or regulation, or a State statute or regulation that implements a program funded in whole or in part with Federal funds.
    • b. For the purpose of identifying health care providers for debt collection under the provisions of the Debt Collection Information Act of 1996 and the Balanced Budget Act.