Privacy Policy

New York Medicaid Choice Privacy Policy

Effective July 9, 2018

Our Commitment to Privacy

New York Medicaid Choice managed care enrollment website (“Site”) operated by MAXIMUS Health Services, Inc. (“MAXIMUS”) for the New York State Department of Health. This Site, located at is available 24 hours a day and 7 days per week. This site is designed to make it easier and more efficient for individuals to interact with the New York Medicaid Choice program and also allows users to find a doctor, enroll in a Medicaid health plan online and check the status of a case online.


MAXIMUS respects your privacy and, consistent with the provision of the New York Internet Security and Privacy Act, Freedom of Information Law, and the Personal Privacy Protection Law, we have developed the following policy to demonstrate our commitment to you. This privacy policy applies to personal information we collect about you. The privacy policy describes the types of information collected, how that information is used, and the choices users have about collection and use of this information. This privacy policy does not govern privacy practices associated with offline activities, websites other than this Site, or products and services not available or enabled via this Site, except as expressly set forth in this Privacy Policy.


For purposes of this policy, "personal information” means any information concerning a natural person which, because of name, number, symbol, mark, or other identifier, can be used to identify that natural person. MAXIMUS does not collect any personal information about you through this website unless you provide that information voluntarily.


Information We Collect

You provide this personal information voluntarily when you:

  • Enroll in a Medicaid health plan online
  • Check the progress of your case online

We clearly identify data you must provide so we can deliver the services or information you have requested. MAXIMUS may ask that you provide or verify the following personal information; the list is not exhaustive:

  • First and last name
  • Mailing address (including ZIP/Postal code)
  • County of residence
  • NYS Benefit ID number
  • NYS Case number
  • Date of birth

During your visit to this website you may complete a transaction such as an enrollment application. The information, including personal information, volunteered by you in completing the transaction is used by MAXIMUS to operate the New York Medicaid Choice program, which include the provision of goods, services, and information.

Information and Choice

As noted above, MAXIMUS does not collect any personal information about you unless you provide that information voluntarily by completing an on-line enrollment application. You may choose not to complete an on-line application. While your choice not to participate in these activities may limit your ability to receive specific services or products through this website, it will not normally have an impact on your ability to take advantage of other features of the website, including browsing or downloading information. Choosing to provide personal information to MAXIMUS, whether we request it or not, constitutes consent to the collection and sharing of the information with the New York State Department of Health for the reasons you shared the information with MAXIMUS.

The information collected by MAXIMUS may also be disclosed to the New York State Department of Health for those purposes that may be reasonably ascertained from the nature and terms of the transaction in which the information was submitted.

MAXIMUS does not share your personal information with unaffiliated third parties.

We may use your information to improve the content, navigation, and efficiency of the web site.

Web Privacy Statement

In addition, our web servers automatically collect and log web usage data from you when you visit the Site. This information, including your Internet Protocol (IP) address, referring sites, pages viewed, browser type, operating system, CPU speed, referring or exit web pages, and length of visit, informs us about how visitors use and navigate the Site.

MAXIMUS will collect the information above from your visit to the Site only for these purposes and for purposes related to the services we provide on behalf of the New York State Department of Health.


Like most websites, we employ "cookies," "Web beacons," and similar devices to help you more efficiently use the Site and to track your activities. A cookie is small amount of data that is transferred to your browser by a Web server and can only be read by the server that gave it to you. It functions as your identification card and enables MAXIMUS to record your activities and preferences. It cannot be executed as code or deliver viruses. Cookies from MAXIMUS can only be read by MAXIMUS websites. A Web beacon is a small transparent gif image that is embedded in an HTML page or e-mail used to track when the page or e-mail has been viewed. MAXIMUS uses cookies and similar devices to track your use of the Site, types of Products and Services viewed and information downloaded, count visitors we receive daily, and our Web servers automatically log the IP/Internet address of your computer. MAXIMUS does not generally use this information to identify you personally. If you do not want your browser to accept cookies, you can modify the cookie option in your browser’s settings. However, some Site features or services may not function properly or be accessible without cookies.

“Do Not Track” Signals”

Do Not Track" is a preference you can set in your web browser to let the websites you visit know that you do not want them collecting information about you. The Site does not currently respond to a "Do Not Track" or similar signals.

Confidentiality and Integrity of Personal Information Collected Through this Website  

MAXIMIUS is strongly committed to protecting personal information collected through this website against unauthorized access, use or disclosure. Consequently MAXIMUS limits employee access to personal information collected through this website to only those employees who need access to the information in the performance of their official duties. Employees who have access to this information follow appropriate procedures in connection with any disclosures of personal information.

MAXIMUS uses various technological and procedural security measures in order to protect the personal information we collect through the Site from loss, misuse, alteration or destruction. We have documented Information Security & Privacy policies to address data.We regularly provide information security and privacy awareness training to our employees. However, you should be aware that, due to the open and unsecured character of the Internet, MAXIMUS cannot be responsible for the security of transmissions of personal information over the Internet. We have prepared a formal incident response plan in case of a data breach.

To protect your communications through this web site, we authenticate, monitor, audit, and encrypt activity. You can tell when the site is secure by looking at the location (URL) field. If the URL begins with https:// (instead of http ://), the document comes from a secure server. This means your personally identifiable information cannot be read or deciphered by unauthorized individuals. This is part of our continuing commitment to protecting your information. Please note, that despite our efforts, no security measures are completely secure. Use of this system constitutes consent to such monitoring and auditing.


The Site is not directed towards children under 13 years of age, nor do we knowingly collect information from children under the age of 13.

Disclosure of Information Collected Through This Website  

The collection of information through this website and the disclosure of that information are subject to the provisions of Health Insurance Portability and Accountability Act (HIPAA) (Public Law 104-191), and the Internet Security and Privacy Act. Except as provided below or as otherwise authorized by law, MAXIMUS will only collect personal information through this website or disclose personal information collected through this website if the user has consented to the collection or disclosure of such personal information. The voluntary disclosure of personal information to MAXIMUS by the user, whether solicited or unsolicited, constitutes consent to the collection and disclosure of the information to the New York State Department of Health for the purposes for which the user disclosed the information to MAXIMUS as a contractor to the New York State Department of Health, as was reasonably ascertainable from the nature and terms of the disclosure.

However, MAXIMUS may collect or disclose personal information without consent if the collection or disclosure is: (1) necessary to perform the statutory duties of the New York State Department of Health, or necessary for MAXIMUS to operate the New York Medicaid Choice program as authorized by law, or authorized by state or federal statute or regulation; (2) made pursuant to a court order or by law; (3) for the purpose of validating the identity of the user; or (4) of information to be used solely for statistical purposes that is in a form that cannot be used to identify any particular person.

Further, the disclosure of information, including personal information, collected through this website is subject to the provisions of HIPAA, the Freedom of Information Law and the Personal Privacy Protection Law.

MAXIMIUS may also disclose personal information to federal or state law enforcement authorities to enforce its rights against unauthorized access or attempted unauthorized access to MAXIMUS information technology assets.

Retention of Information Collected Through this Website  

The information collected through this website is retained by MAXIMUS in accordance with its contract with the New York State Department of Health. Information, including personal information, that you submit by completing an on-line enrollment application is retained by MAXIMUS for seven (7) years in accordance with the records retention and disposition schedule established for the records of the program unit to which you submitted the information. Information concerning these records retention and disposition schedules may be obtained through the Internet privacy policy contact listed in this policy.

Access to and Correction of Personal Information Collected Through this Website  

To access and correct demographic and Medicaid eligibility information the individual must contact their Local District Social Service office.  To access and correct information about enrolling in a health plan they should call New York Medicaid Choice.

Except as otherwise provided by law, any user may submit a request to the New York State Department of Health privacy compliance officer to determine whether personal information pertaining to that user has been collected through this website. Any such request shall be made in writing and must be accompanied by reasonable proof of identity of the user. Reasonable proof of identity may include verification of a signature, inclusion of an identifier generally known only to the user, or similar appropriate identification. The address of the privacy compliance officer is:

New York State Department of Health
Corning Tower, Room 2348
Albany, New York 12237-0044

Except as otherwise provided by law, the privacy compliance officer shall, within five (5) business days of the receipt of a proper request, provide access to the personal information; deny access in writing, explaining the reasons therefore; or acknowledge the receipt of the request in writing, stating the approximate date when the request will be granted or denied, which date shall not be more than thirty (30) days from the date of the acknowledgment.

In the event that the New York State Department of Health has collected personal information pertaining to a user through the state agency website and that information is to be provided to the user pursuant to the user's request, the privacy compliance officer shall inform the user of his or her right to request that the personal information be amended or corrected under the procedures set forth in HIPAA and in section 95 of the Public Officers Law, except as otherwise provided by law.


Our Site may contain links to other sites. Links do not imply endorsement by MAXIMUS. Please be aware that these other sites are not subject to the MAXIMUS privacy policy and we are not responsible for the privacy practices of such other sites. We recommend that you review the privacy policies of those sites when you visit them.

Information Disclaimer

Information provided on this website is intended to allow the public immediate access to public information. While all attempts are made to provide accurate, current, and reliable information, MAXIMUS recognizes the possibility of human and/or mechanical error. Therefore, MAXIMUS, its employees, officers and agents make no representations as to the accuracy, completeness, currency, or suitability of the information provided by this website, and deny any expressed or implied warranty as to the same.

Changes to this Privacy Policy

We will occasionally update this privacy policy. When we do, we will revise the "last updated" date at the top of the privacy policy. Please check the Site from time to time for the most current version of our privacy policy. Your continued use of the Site after we have notified you of changes as described above constitutes your acceptance of the changes

How to Contact Us:

For questions regarding this Internet privacy policy, please contact:


Via e-mail:


Via Mail:

Privacy Official Office


1891 Metro Center Drive

Reston, VA 20190

Reach Us


(Long term care customer services)

TTY 1-888-329-1541

Monday - Friday
8:30 a.m. - 8:00 p.m.

10:00 a.m. - 6:00 p.m.

Quick Assist

Have questions? We’re here to help. Our counselors will be glad to answer your questions. We can also help you choose a plan over the phone. All languages are spoken.