Terms and Use

Links to topics on this page:

MNsure Eligibility and Enrollment System

The MNsure Eligibility and Enrollment System (MN-EES) is licensed for use by MNsure and is subject to the Minnesota Government Data Practices Act.

To purchase insurance online through MNsure, an applicant needs to create an account in MN-EES. System access is subject to compliance with the law and the terms and conditions for use of the system. The primary contact on an account is responsible for maintaining confidentiality of their personal account information. The primary contact certifies that the information provided on their application is true and accurate. The primary contact has a duty to ensure the accuracy, relevance, timeliness and completeness of personally identifiable information, as is reasonably necessary, to ensure fairness in making determinations about an individual. The primary contact may not knowingly or willfully conceal, remove, mutilate, obliterate, falsify or destroy information.

A primary contact who provides and views information on behalf of their household members, dependents, or others certifies that they have the permission of the individual data subject, or are the legal guardian, or are otherwise authorized to access and submit information on behalf of others. Individuals who view or submit information on behalf of another agree to use personally identifiable information for the purpose of completing an application or as otherwise allowed by state or federal law and must safeguard the data from unauthorized access, use, modification, destruction, theft or disclosure.

Providing false information or using information obtained through a MNsure system for unauthorized purposes is a violation of law and may subject you to criminal and civil penalties. Fraud, waste, abuse and any attempt to breach the security of the system are strictly prohibited. Any suspected misuse, fraud, waste or abuse should be reported by emailing MNsure at mnsurecompliancehotline@mnsure.org or calling MNsure’s anonymous complaints telephone line at 844-466-7873.

Rules of Behavior for Authorized MN-EES Users

The MNsure Eligibility and Enrollment System (MN-EES) is licensed for use by MNsure and is subject to the Minnesota Government Data Practices Act. The MNsure Board of Directors grants authorized users authority to access, view and, in some cases, modify not-public data within MN-EES, including private information about applicants, state employees, contractors, assister partners and other system users. By accessing MN-EES, authorized users agree to use the system only for authorized purposes and in compliance with state and federal law. All authorized users must adhere to rules of behavior for protection of private information. These rules are consistent with and in addition to state and federal laws and the privacy and security policies and procedures for MNsure and the state of Minnesota, including the Enterprise Security Policies and Standards, and the Appropriate Use of Electronic Communication and Technology Policy (applicable only to state employee users). Non- compliance with the rules and associated privacy & security policies may be cause for disciplinary actions including suspension or termination of access privileges, employment consequences, and civil and criminal legal action.

1. System Use. System use must comply with all applicable state policies and standards, and all applicable state and federal laws.

2. Unauthorized Access Prohibited. Unauthorized access to MN-EES or use of the system for any act or use other than official, assigned duties is strictly prohibited. This prohibition includes access in excess of that minimally necessary to perform assigned job duties and training.

3. Monitoring. System and equipment use are subject to monitoring by MNsure to ensure proper performance of applicable security features or procedures. Such monitoring may result in the acquisition, recording and analysis of all data being communicated, transmitted, processed or stored in this system. If monitoring reveals possible evidence of criminal activity, such evidence will be provided to law enforcement personnel.

4. Data Integrity. Authorized users have a duty to ensure the accuracy, relevance, timeliness and completeness of personally identifiable information, as is reasonably necessary, to assure fairness in making eligibility determinations about an individual. Authorized users may not knowingly or willingly conceal, remove, mutilate, obliterate, falsify or destroy information outside of appropriate retention periods.

5. Authorized Purposes Only. Authorized users may use personally identifiable information only for the purposes for which it was authorized to be collected and used.

6. Security Obligations. Authorized users have an obligation to protect information and the system from unauthorized access, use, modification, destruction, theft or disclosure by maintaining security and control over devices used to access the system; refraining from sharing account information; and using secure methods of access, storage and transmission of information in the system.

7. Incident Reporting. Authorized users must immediately report any lost or stolen equipment, known or suspected security incidents or breaches, known or suspected policy violations, or suspicious activity in accordance with established procedures. Known or suspected security incidents involve the actual or potential loss of control or compromise, whether intentional or unintentional, of sensitive information maintained by or in possession of MNsure or the state of Minnesota, or information processed by contractors and third parties on behalf of MNsure.

8. Disclosures. Authorized users must not disclose or disseminate personally identifiable information except as authorized by law and consistent with assigned duties or with the consent of the subject of the data, where applicable.

Minnesota Eligibility Technology System Terms of Use

The Minnesota Eligibility Technology System (METS) is the property of the state of Minnesota and is subject to the Minnesota Government Data Practices Act.

To apply for insurance coverage online through METS, an applicant needs to create a METS account. This account access is granted subject to compliance with the law and the terms and conditions for use. Account holders are responsible for maintaining confidentiality of their personal account information. Applicants certify that the information provided is true and accurate. Applicants and account holders have a duty to ensure the accuracy, relevance, timeliness and completeness of personally identifiable information, as is reasonably necessary, to assure fairness in making determinations about an individual. Applicants and account holders may not knowingly or willfully conceal, remove, mutilate, obliterate, falsify or destroy information.

Individuals who provide and view information on behalf of household members, dependents, or others verify that they have the permission of the individual data subject, are the legal guardian, or are otherwise authorized to access and submit the information. Individuals who view or submit information on behalf of another individual agree to only use personally identifiable information for the purpose of completing the application or as otherwise allowed by state or federal law and to safeguard the information from unauthorized access, use, modification, destruction, theft or disclosure.

Providing false information or using information obtained through METS for unauthorized purposes is a violation of law and may subject you to criminal and/or civil penalties. Fraud, waste, abuse and any attempt to breach the security of the system are strictly prohibited

Rules of Behavior for Authorized METS Users

The Minnesota Eligibility Technology System (METS) is the property of the state of Minnesota and is subject to the Minnesota Government Data Practices Act. The state of Minnesota grants authorized users authority to access, view and, in some cases, modify the not-public data within METS, including the private information of applicants, state employees, contractors, assister partners and other system users. By accessing METS, authorized users agree to use the system only for authorized purposes and in compliance with state and federal law. All authorized users must adhere to rules of behavior for protection of private information. These rules are consistent with and in addition to state and federal laws and the privacy and security policies and procedures for the state of Minnesota, including the Enterprise Security Policies and Standards, and the Appropriate Use of Electronic Communication and Technology Policy (applicable only to state employee users). Non- compliance with the rules and associated security policies may be cause for disciplinary actions including suspension or termination of access privileges, employment consequences, and civil and criminal legal action.

1. System Use. System use must comply with all applicable state policies and standards, and all applicable state and federal laws.

2. Unauthorized Access Prohibited. Unauthorized access to METS or use of the system for any act or use other than official, assigned duties is strictly prohibited. This prohibition includes access in excess of the minimum necessary to perform assigned job duties and training.

3. Monitoring. System and equipment use are subject to monitoring by the state to ensure proper performance of applicable security features or procedures. Such monitoring may result in the acquisition, recording and analysis of all data being communicated, transmitted, processed or stored in this system. If monitoring reveals possible evidence of criminal activity, such evidence may be provided to law enforcement personnel.

4. Data Integrity. Authorized users have a duty to ensure the accuracy, relevance, timeliness and completeness of personally identifiable information, as is reasonably necessary, to assure fairness in making determinations about an individual. Authorized users may not knowingly or willingly conceal, remove, mutilate, obliterate, falsify or destroy information outside of appropriate retention periods.

5. Authorized Purposes Only. Authorized users may only use personally identifiable information for the purposes for which it was authorized to be collected and used.

6. Security Obligations. Authorized users have an obligation to protect the system and information from unauthorized access, use, modification, destruction, theft or disclosure by maintaining security and control over devices accessing the system, refraining from sharing account information, and using secure methods of access, storage and transmission of system information.

7. Incident Reporting. Authorized users must immediately report any lost or stolen equipment, known or suspected security incidents or breaches, known or suspected policy violations, or suspicious activity in accordance with established procedures. Known or suspected security incidents involve the actual or potential loss of control or compromise, whether intentional or unintentional, of sensitive information maintained by or in possession of MNsure or the Minnesota Department of Human Services, or information processed by contractors and third parties on behalf of the state.

8. Disclosures. Authorized users shall not disclose or disseminate personally identifiable information except as authorized by law and consistent with assigned duties or with the consent of the subject of the data, where applicable.

Notice of Privacy Practices

This notice tells you about the privacy practices of MNsure and about your rights and responsibilities when applying for and enrolling in insurance coverage the MNsure. MNsure manages eligibility and enrollment in individual market qualified health plans (QHP), with or without advanced premium tax credits (APTC) or cost-sharing reductions (CSR), in coordination with the insurance carrier that you select.

If you are applying for financial assistance, the Minnesota Department of Human Services (DHS) may also receive your application and the protected information about you and your household. DHS and Minnesota county and tribal agencies manage eligibility and enrollment in Medical Assistance (MA) and MinnesotaCare.

The DHS and MNsure Notice of Privacy Practices applies to the protected information received for applications for health care programs. It is available at: https://edocs.dhs.state.mn.us/lfserver/Public/DHS-4839K-ENG.

Why do we ask for your private information?

We need to tell you apart from other people with the same or similar name, to decide what coverage you are eligible for, and to help you enroll in health insurance programs. We also need to make reports, conduct audits and research, evaluate our programs, investigate fraud, and may need to collect money from the state or federal government for the services we provide.

Do you have to answer the questions we ask?

You do not have to give us your private information. But, without the information, we may not be able to help you. If you give us incorrect information on purpose, you can be investigated and charged with fraud.

With whom may we share your information?

MNsure shares information about you only as needed and allowed or required by law. We may share your information with agencies or persons who need the information to do their jobs, such as MNsure employees, investigators and auditors, assister partners with whom you are working, law enforcement officials, other state, federal and local governmental agencies, your selected insurance carrier, managed care organization or others who pay for your care, and others authorized by law to receive the information. Please see the applicable privacy warnings for specific information regarding with whom your private data may be shared.

How long will MNsure retain your private information?

Information provided in an application for coverage through MNsure will be retained for ten years, as required by federal law. Other information you provide will be retained as required by the MNsure records retention schedule.

What are your rights regarding the information we have about you?

You may inspect or request a copy of public and private information we have about you as the subject of the data. Minnesota Statutes, § 13.04. This is called a data practices request. If you request data about yourself held by MNsure, you may view and inspect it at no charge, or if you request copies, you may have to pay copy costs as outlined below.

If you believe the public or private information we have about you is not accurate or complete, please send your concerns in writing along with an explanation of the information you do not agree with to the MNsure Privacy Office. Within 30 days, MNsure will either (1) correct the data found to be inaccurate or incomplete and attempt to notify past recipients of inaccurate or incomplete data; or (2) notify you that MNsure believes the data to be correct. If there is a request to disclose data in dispute, MNsure will attach your statement of disagreement to the disclosed data. You can appeal MNsure’s determination to the commissioner of administration according to Minnesota Statutes, section 13.04, subdivision 4.

You also have the right to see a record of the people or organizations with which MNsure has shared your information. You must ask in writing for a copy of this record to our privacy office. As a parent, you have the right to view and get copies of data about your minor children (under the age of 18), unless we have evidence such access is prohibited by law. As a legally appointed guardian, you have the right to view and get copies of data about an individual for whom you are the appointed guardian.

Minors have the right to ask MNsure not to give data about them to their parent or guardian. Such request must be in writing and include the reasons that we should deny your parents access to the data. If the agency agrees that sharing the information is not in your best interest, the information will not be shared with your parents. If the agency does not agree, the information may be shared with your parents if they ask for it.

What are our responsibilities?

MNsure must protect your private and confidential information according to the terms of this notice and under state and federal law. We may not use your information for reasons other than what is authorized by law and what is listed in this policy. We will put changes to our privacy policies on our website at https://www.mnsure.org.

What if you believe your privacy rights have been violated?

You may complain if you believe your privacy rights have been violated. You cannot be denied service or treated badly because you have made a complaint. If you believe that your medical privacy was violated by your doctor or clinic, a health insurer, a health plan, or a pharmacy, you may send a written complaint either to the county agency, the organization, or to the federal civil rights office at:

U.S. Department of Health and Human Services Office for Civil Rights, Region V

233 N. Michigan Avenue, Suite 240 Chicago, IL 60601

312-886-2359 (voice); 800-368-1019 (toll free); 800-537-7697 (TTY); 312-886-1807 (fax)

If you think that MNsure has violated your privacy rights, you may send a written complaint to the U.S. Department of Health and Human Services at the address above or to:

MNsure Privacy Office, P.O. Box 64253, St. Paul, MN 55164-02253.

After we get your complaint, we will review it and notify you within 10 business days in writing about whether we have authority to investigate. If we do, we will investigate the complaint and notify you of the outcome within 90 days.

How can you request public information?

The MNsure website provides a large variety of public information about MNsure, its contracts and funding, and commonly asked questions related to enrolling in health insurance coverage through MNsure. You may request to inspect or obtain copies of additional data held by MNsure pursuant to the Minnesota Government Data Practices Act (Minnesota Statutes, Chapter 13). Your request must be in writing and submitted to datarequests@mnsure.org or mailed to:

MNsure Privacy Office
P.O. Box 64253
St. Paul, MN 55164-0253

Please include the following information in your data request:

  • Date of request
  • Specify whether the request is to inspect data, receive copies of data, or copies and inspection
  • Describe the data you are requesting as specifically as possible
  • Contact information (name, address, phone number, email address)

Note: You do not have to provide any of the above contact information. However, if you want us to mail/email you a copy of data, we will need your contact information. In addition, if we do not understand your request and need to get clarification from you, without contact information we will not be able to begin processing your request until you contact us.

Costs for Copies and Data Collection

You may have to pay for copies of information that you request. MNsure may charge for time spent searching and retrieving when the request is by someone other than the subject of the data. Searching and retrieving is time spent identifying files, databases, or other storage devices (paper or electronic) to locate data or to determine whether data exist to respond to a request, and retrieving the relevant data. There is no charge to view or inspect data in person. MNsure has discretion to waive copy costs.

Requests for paper copies are charged at $.25 per page for requests involving fewer than 100 pages. A two-sided, black-and-white, letter or legal sized paper copy counts as two copies, and costs $.50 per two-sided page of printed data.

For data requests involving more than 100 pages or requests for electronic data, MNsure may charge the actual costs. Actual costs may include employee time (including time for searching and retrieving data and making copies), mailing costs, and costs for materials (paper, CDs, DVDs). There is no charge for separating private data from public data, and there is no requirement to create summary data from existing public data. For calculation of staff time costs in responding to the request, MNsure will charge the actual cost for employee time to search for and retrieve the data; and the cost to make copies.

MNsure does not charge for viewing or inspecting public records or private records by the data subject, searching and retrieving costs when the requestor is the data subject, or when providing data to another government agency or for law enforcement purposes. A MNsure participant who requests copies of his or her own eligibility or enrollment information for purposes of pursuing an appeal should work with the MNsure legal, compliance and administrative services.

How long will it take to receive or inspect the information requested?

If you are the subject of the data requesting data about yourself, MNsure will respond as soon as possible, but no later than 10 business days after your request. For public data requests, MNsure generally responds to requests in the order received and within a reasonable time depending on the need for staff time to search and retrieve responsive public information as well as the size of the request.

MNsure.org Privacy Policy

MNsure has established several security steps to safeguard your data and prevent people from accessing your information without permission. These measures are designed to protect the privacy of the information kept in our computer systems and to ensure that data is transmitted safely. When you visit the MNsure website to browse or compare insurance plans, we automatically collect some technical information. This includes:

  • Your IP address and domain name
  • The type of web browser and operating system you are using
  • The date, time and specific pages you visited,
  • The city you were in when you accessed the site.

To gather this data, we use cookies. These are small text files placed on your device that help us analyze website traffic and improve our services. This information is general and is not used to identify you as an individual.

Managing Your Cookies

If you do not want cookies stored on your device, you can clear or block them using your browser’s settings. Even if you choose to block cookies, you will still be able to use all the resources and tools on the MNsure website.

External Links and Safety

Our website contains links to other sites. Once you click a link and leave MNsure.org, you are no longer covered by our privacy policy. MNsure and the State of Minnesota are not responsible for the accuracy of these outside websites. If you choose to rely on information from a linked site, you do so at your own risk.

Copyright Notice

The content on MNsure.org is protected by United States copyright laws, pursuant to Title 17 of the United States Code.

  • Ownership: MNsure has clearly labeled its work to protect its legal rights.
  • Linking: Generally, it is not a legal violation to provide a link from your own website to ours.
  • Fair Use: You may use our content for specific purposes like news reporting, teaching or research. Any other use without permission is a violation of federal law.

MNsure Text Alerts

When you sign up for text alerts, we will send you important updates, news, and enrollment deadlines.

  • Privacy: According to Minnesota law, your phone number you use to sign up for text alerts is private information (Minnesota Statutes, section 13.356). It will only be used by MNsure and our partner, Granicus, to send you notifications.
  • Costs: Standard messaging and data rates from your cell phone provider may apply.
  • Unsubscribing: To stop receiving all alerts, text MNSURE STOP to 66468.

If you have more questions, you can contact us at publicfeedback@mnsure.org .

Last reviewed: May 2026