1.3 MIB and Consumer Reports

What MIB Is

The Medical Information Bureau (MIB) is a member-owned, not-for-profit corporation that operates an information exchange among its member insurance companies. When a member insurer underwrites an application for life, health, or disability insurance and discovers significant adverse health information, it reports a code to MIB. Future member insurers checking an applicant can retrieve that code as an alert that another member found something of underwriting significance.

The crucial point is what MIB is not. MIB is not a claims payer, not a rate-setter, not a regulator, not a government agency, and not a full medical record. It does not approve or deny coverage, and it does not set premium rates. It is simply a coded-alert exchange that helps members control adverse selection and detect fraud and non-disclosure.

How an MIB Code Works

MIB codes are abbreviated, standardized medical codes — not narrative diagnoses. A code might indicate a history of cardiovascular disease, diabetes, or hazardous avocation, but it does not contain the applicant's detailed clinical history, dates of service, or physicians' names. The underwriter who receives an MIB hit treats it only as a prompt to investigate further — typically by ordering an Attending Physician Statement or paramedical exam — before making an underwriting decision. An MIB code alone is never a basis to decline without further verification, because the code may be outdated, belong to a different person, or describe a condition the applicant already disclosed.

MIB Is a Consumer Reporting Agency Under the FCRA

Because MIB assembles and sells information on consumers to insurers for underwriting, it is a consumer reporting agency under the Fair Credit Reporting Act (FCRA). As a result, two duties attach whenever an insurer uses an MIB report:

1. Permissible purpose — the insurer may request an MIB report only with the applicant's authorization and only in connection with an insurance transaction.
2. Adverse-underwriting-decision notice — if the insurer takes an adverse underwriting action based wholly or partly on the MIB report, it must give the applicant a written notice identifying MIB, stating that the report contributed to the decision, and advising the applicant of the right to obtain a copy of the MIB file and to dispute its accuracy.

An adverse underwriting decision is broader than a decline. It includes charging a higher premium, reducing benefits, adding an exclusion rider, or applying a table rating because of the MIB report.

MIB Notice and the Applicant's Rights

At the time of application, the insurer must give the applicant an MIB notice explaining that the insurer may report to and request information from MIB and describing how the applicant may obtain and correct their MIB file. If an adverse decision is made, the separate FCRA adverse-decision notice must follow.

Consumers have the right to request their MIB file once per year free of charge and to dispute any code they believe is inaccurate. MIB must investigate disputes and correct or delete information it cannot verify.

HIPAA and Insurance Underwriting

The Health Insurance Portability and Accountability Act (HIPAA) governs the use and disclosure of protected health information by covered entities (health plans, health care clearinghouses, and most health care providers) and their business associates. Insurers that are health plans are covered entities and must handle protected health information according to HIPAA's privacy and security rules.

Importantly, MIB itself is not a HIPAA-covered entity in its role as a member exchange; it is governed primarily by the FCRA. However, member insurers that are health plans must comply with HIPAA when they share or use medical information, and the FCRA and HIPAA can interact when an insurer uses medical information in underwriting. For exam purposes, remember the division of labor:

• FCRA governs the consumer-report function of MIB and the adverse-decision notice.
• HIPAA governs protected health information held by covered entities and their business associates.

What MIB Is Not — Common Trap Answers

Exam items often list distractors that sound plausible but misstate MIB's role. Reject any statement that MIB:

• Pays claims — it does not; the issuing insurer pays claims.
• Sets premium rates — it does not; the insurer's actuarial department sets rates.
• Approves or denies applications — it does not; the underwriter decides.
• Maintains a full medical history — it holds only coded alerts.
• Is a government agency — it is a member-owned private corporation.
• Reports favorable information — MIB records only significant, unfavorable health information; it is a negative exchange.

Quick Comparison: MIB vs. Other Underwriting Sources

Exam Signals for MIB

• Coded medical alert shared among insurers → MIB.
• Insurer declines or rates up partly because of an MIB code → FCRA adverse-underwriting-decision notice.
• Member-owned, not-for-profit exchange of adverse health information → MIB.
• Applicant wants to see and correct the coded file → right to request and dispute the MIB file.
• Statement that MIB pays claims or sets rates → false; reject it.

MIB is the single most-tested underwriting source on the A&H exam because it is unique to insurance. Knowing both what MIB is and what it is not will resolve most of the items in this area.