Agencies
Services
Get Covered Illinois Privacy Notice
Get Covered Illinois Privacy Statement and Public Records Disclosure
In accordance with the fundamental principles of the American constitutional form of government, it is the public policy of the State of Illinois that all individuals are entitled to full and complete information regarding government affairs and the official actions and policies of public officials and employees. This notice regarding access to information is not intended to violate individual privacy, promote commercial enterprises, or disrupt the lawful work of public bodies; rather to ensure an individual’s right to transparency.
The Get Covered Illinois (GCI) website consists of both public informational areas and protected private areas that provide transactional assistance and business services to clients and authorized partners.
Information collected or received through the GCI website may become a public record and may be subject to disclosure under the Illinois Freedom of Information Act (5 ILCS 140/1 et seq.). However, it is GCI’s policy that no personal information you provide—including, but not limited to your name, address, telephone number, driver’s license number, Social Security Number (SSN), or email address will be sold, rented, or disclosed to any unauthorized individuals or entities. Only Illinois state government agencies or authorized GCI contractors and grantees may receive personal information, and only in accordance with Illinois law.
When transmitting personal information over the internet or intranet, GCI employs security measures, such as encryption, to safeguard your privacy information and protect your personal data.
Legal Authority to Collect Personal Information
Pursuant to Title 45 Part 155 Section 155.260 of the United States Department of Health and Human Services (DHHS) regulations, GCI is authorized to collect PII (Personally Identifiable Information) or PHI (Protected Health Information) to determine eligibility for enrollment in qualified health plans; to assess potential eligibility for Medicaid/Children Health Insurance Program (CHIP); and to determine eligibility for exemptions from the individual mandate to maintain health insurance coverage. See 45 CFR §155.260. GCI will not create, collect, use, or disclose PII or PHI for any purposes that are not authorized under this regulation.
The following principles are outlined in the regulation:
Individual Access: Individuals will be provided with a simple and timely means to access and obtain their PII and PHI;
Correction: Individuals will be provided with a timely means to dispute the accuracy of their PII and PHI and to have erroneous information corrected;
Openness and Transparency: All policies, procedures, and technologies that affect individuals and their PII or PHI are fully disclosed to the public;
Individual Choice: Individuals will be provided a reasonable opportunity and capability to make informed decisions about the collection, use, and disclosure of their PII and PHI;
Collection, Use, and Disclosure Limitations: PII and PHI will be created, collected, used, and/or disclosed only to the extent necessary to accomplish the goals of GCI;
Data Quality and Integrity: Persons and entities will take reasonable steps to ensure that personally identifiable health information is complete, accurate, and up-to-date to the extent necessary to provide services to the customers of GCI;
Safeguards: PII and PHI is protected with reasonable operational, administrative, technical, and physical safeguards to ensure its confidentiality, integrity, and availability and to prevent unauthorized access, use, or disclosure;
Accountability: These principles are implemented, and adherence assured, through independent security audits by a third party
Collection of Information
Get Covered Illinois (GCI) collects information that you voluntarily provide through a variety of ways, including:
Completing surveys;
Sending electronic messages or emails;
The health insurance application and enrollment process;
Verbal interactions with our employees or customer service representatives;
Filing an appeal.
For example, surveys may request personal information such as your name, email address, mailing address, or telephone number. Your application will include more detailed personal and health information, including Social Security Number and, in some cases, tax and income details.
GCI collects only the minimum information necessary to carry out its mission of providing affordable health insurance to Illinois residents. The data collected during application, enrollment, customer support, and renewals is used exclusively to:
Ensure efficient GCI operations;
Verify eligibility for enrollment in qualified health plans (QHPs) or qualified dental plans (QDPs);
Determine eligibility and amounts for Advance Premium Tax Credits (APTC) and Cost Sharing Reductions (CSR).
GCI, with its safeguards in place, will not sell or rent your personal information to third parties for marketing purposes. Your personal information will be shared with others, on a limited basis, when necessary to process your application or as required by law, such as sharing with state agencies, authorized contractors, or insurance companies involved in your enrollment.
Types of Information Collected
To facilitate enrollment and eligibility determinations, GCI collects information including but not limited to:
Demographic Data: Name, address, telephone number, email, date of birth;
Income Data: Tax filing status, marital status, number of dependents, employer, income details;
Citizenship and Immigration Data: Social Security Number, resident alien number, tribal ID number, incarceration status;
Disability Information: Whether a member of your household is blind, disabled, or requires assistance with daily living (used only to determine Medicaid eligibility, not for denying coverage);
Health Insurance Coverage Information: Current and past health coverage, tobacco use, plan selections, and other enrollment-related data.
How Your Information is Used
The information you provide may be used for purposes such as:
Determining eligibility for QHPs, Medicaid, and other insurance affordability programs;
Calculating premium support amounts;
Responding to your inquiries or requests for assistance;
Producing summary statistics and reports for planning and auditing;
Detecting and preventing fraud;
Improving GCI operations and website usability;
Fulfilling legal obligations, protecting rights and property, and cooperating with law enforcement as required.
Some technical data related to your interactions with the GCI website, such as page views and system response times, may also be collected to enhance site performance and user experience.
Documentation and Recordings
All interactions with GCI’s website and customer service call center, including emails, notifications and telephone calls, are documented. Telephone calls may be recorded for audit, training, and appeals support. By calling GCI’s customer service center, you consent to this recording. These recordings are stored securely and used to improve service quality.
Sharing and Disclosure
Your personal information will only be shared with:
Authorized GCI employees;
Business partners, grantees, contractors, or designees working on GCI operations;
Government agencies and insurance companies when necessary for enrollment and eligibility determinations; and
Law enforcement agencies, if required by State or Federal law(s).
All parties with access to your information must adhere to strict confidentiality and security requirements.
Data Aggregation and De-Identification
GCI may combine information you provide with data from other sources, such as Medicaid eligibility data, to improve service delivery. Combined information is treated as personal information.
GCI may also use or share aggregate or de-identified data that cannot be traced back to you. Such data is exempt from privacy restrictions, and GCI and its contractors are prohibited from attempting to re-identify this information.
Personal Information and Choice
What is Personal Information?
Personal information includes any data that identifies you specifically, such as your name, address, phone number, driver’s license number, and Social Security Number. Internet protocol (IP) addresses or domain names are not considered personal information.
When We Collect Personal Information
GCI collects personal information only when you voluntarily provide it, such as when you:
Participate in surveys;
Contact us for assistance;
Complete applications for health insurance.
Choosing not to provide personal information or participate in these activities will not affect your ability to use other parts of the GCI website but may affect your eligibility.
Public Record Notice
Please be aware that personal information submitted to GCI may become a public record subject to inspection and copying under the Illinois Freedom of Information Act (FOIA), unless protected by State or Federal law(s). For more information about public records, we encourage you to visit Illinois FOIA information.
Your Rights and Choices
Unless you are participating in an activity that requests you to provide personal information, such as applying for coverage or requesting assistance, you will not be required to provide such personal information.
When personal information is collected, you have the right to:
Access your personal data;
Request correction of any inaccurate information;
Make informed decisions about what information you provide and how it is used.
If you have questions about your privacy rights, you can contact GCI directly at gci.compliance@illinois.gov.
Policies for Individuals Under 13 Years of Age
GCI is committed to complying fully with the Children's Online Privacy Protection Act (COPPA). This Federal law, COPPA requires us to inform parents and legal guardians about our information collection and use practices. COPPA also requires that we obtain parental consent before we allow children under the age of 13 to access and/or use our services. Accordingly, children under the age of 13 are not authorized to provide GCI with personally identifying information; and GCI will not use any such information in its database or other data collection activities. GCI appreciates your cooperation with this federally mandated requirement. Users are cautioned that the collection of personal information volunteered by children online or by e-mail will be treated the same as information given by an adult and may be subject to public access.
Information Collection and Use
Do I Have to Provide Personal Information (PII/PHI) to GCI?
By using GCI services—whether through the website, customer service call center, mail, or other means—you consent to the collection, use, and sharing of your information as described in this Privacy Notice. By using GCI services, you also agree to comply with all applicable State or Federal law(s), regulations, and GCI policies, terms, and guidelines in effect.
If you do not agree with these terms, then please do not access GCI’s website or customer service call center.
Is Providing Personal Information Required?
You are required to provide Personally Identifiable Information (PII) or Protected Health Information (PHI) to GCI in, for example, the application, eligibility, and or enrollment processes. Failing to provide requested information may delay or prevent GCI from determining your eligibility for coverage, financial assistance, or other benefits.
Note: It is important you provide current, accurate, and truthful information. Submitting false or misleading information knowingly and or willfully may result in penalties and other legal consequences.
Social Security Numbers (SSNs)
Applicants for health coverage must provide their Social Security Number (SSN), if they have one. Additionally, the SSNs of tax filers not applying for coverage but whose tax information is used for eligibility verification must also be provided.
While not applying for coverage, others are encouraged but not required to provide their SSN to expedite the application process.
GCI uses SSNs to verify income and other eligibility criteria for assistance programs. For help obtaining an SSN, please visit socialsecurity.gov or call 1-800-772-1213 (TTY 1-800-325-0778).
Website Usage and Web Logs
GCI analyzes web server logs to improve website content and secure data exchanges. Web logs do not contain personally identifiable information.
GCI collects Usage Information (“UI”) automatically through cookies and similar technologies. This collection includes data about your computer, browser, IP address, sites visited, time spent on sites and or pages and other non-identifiable metrics.
Cookies are small data files stored on your device to improve site functionality and user experience. You may disable cookies via your browser settings, but some site features may be unavailable as a result.
If you provide Personal Information during your visit to the GCI website, GCI may associate that information with data collected automatically, such as web logs, cookies, or device information, to improve our services. Automatic data collection may be conducted by GCI or its service providers.
Types of Information Collected Automatically
When you visit the GCI website, we may collect:
IP address (not email address);
Domain names;
Browser type and language;
Referring website URL;
Date and time of access;
Sites and or Pages visited and time spent; and
Information from secure transactions, such as the domain accessed from, user identity (if applicable), and pages or files accessed.
This automatically collected data is used solely to improve site functionality and services, and to fulfill GCI’s legal obligations.
Correspondence and Surveys
If during your visit to the GCI website you participate in a survey or send an e-mail, the following additional information will be collected:
E-mail Correspondence: GCI will collect your e-mail address and contents of the e-mail. GCI may use your e-mail to respond appropriately. This may be to respond to you, to address issues you identify, to further improve the GCI website, or to forward the e-mail to another agency for appropriate action.
Surveys: GCI will collect any information you volunteered in response to a survey. Survey information is used for the purpose designated. The information collected is not limited to text characters and may include audio, video and graphic information formats that you have provided.
Cookies and Automatic Data Collection
When you visit the GCI website, GCI may use automatic data collection technologies, such as cookies, web beacons (also known as pixel tags or clear GIFs), and similar tools to improve your browsing experience, analyze site usage, and help ensure the security and functionality of our services.
What Are Cookies?
Cookies are small text files stored on your computer or device by websites you visit. They are widely used to make websites work efficiently and securely, as well as to provide information to website owners.
GCI may use both:
Session Cookies: Temporary cookies that are erased when you close your browser. These allow you to navigate our site efficiently, use secure pages, and complete transactions without re-entering information;
Persistent Cookies: Cookies that remain on your device for a set period or until you manually delete them. These allow the website to remember you on return visits and provide customized features.
Cookies help GCI to:
Track website usage patterns and traffic trends;
Retain user preferences and settings;
Authenticate user identity for secure access to protected areas;
Ensure secure transmission of information during online transactions;
Improve site functionality, performance, and user experience.
Cookies collected by GCI are not used to create personal profiles or to track your internet usage outside of the GCI website.
Managing Cookies
You can choose whether to accept or reject cookies through your internet browser settings. Most browsers automatically accept cookies, but you may modify your browser setting to decline cookies if you prefer. Note that rejecting or deleting cookies may impact the functionality of certain secure areas of the GCI website, and some services may not be available if cookies are disabled.
For more detailed information about managing cookies, including how to accept, reject, block or delete them, you may refer to resources provided by the Interactive Advertising Bureau (IAB) at https://www.allaboutcookies.org/.
Web Beacons and Other Technologies
In addition to cookies, GCI may use web beacons and similar tracking technologies to monitor the effectiveness of the website and communications. These tools may collect limited information such as time, date, and the page or advertisement viewed but do not collect personal information.
Third-Party Service Providers
Some data collection activities may be performed on behalf of GCI by approved third-party service providers who are contractually obligated to meet the same strict data privacy and security standards as GCI.
Information Sharing with External Entities
GCI will need to share information with insurance carriers, as well as State and Federal agencies in order to process requests for enrollment in QHPs/QDPs and determine eligibility for health/dental coverage, APTC, and CSR.
The following table outlines the entities GCI will share data with and how that data is used. All entities that receive data from GCI are required to support the same level of data security standards as GCI itself.
#
|
Entity
|
Data
|
Usage of Data
|
1.
|
Qualified Health and Dental Plan Carriers
|
Individual APTC Amount, Premium Amount, Plan Selection, Enrollment Status
|
Carriers are notified of the customer’s plan selection and account maintenance activities. GCI is notified by Carriers of the enrollment status.
|
2.
|
Illinois Department of Healthcare and Family Services (HFS)
|
Individual Demographic, Income, Citizenship, Disability
|
HFS determines eligibility for Medicaid/All Kids (or CHIP) in the State of Illinois. GCI will refer applications for coverage to HFS via electronic data transfer if potential eligibility for Medicaid/All Kids is assessed.
|
3.
|
United States Department of Health and Human Services, Centers for Medicare and Medicaid Services (CMS)
|
Individual Enrollment, Premium Amount, APTC
|
GCI is federally mandated to report enrollment, premium, and APTC amounts to CMS for each enrolled individual.
|
4.
|
United States Internal Revenue Service (IRS)
|
Individual Enrollment, Premium Amount, APTC
|
GCI is federally mandated to report enrollment, premium, and APTC amounts to the IRS for each Tax Household.
|
5.
|
United States Social Security Administration
|
Name, Social Security Number, Individual Demographic Information
|
GCI is federally mandated to verify citizenship status.
|
6.
|
United States Department of Homeland Security
|
Name, Social Security Number (SSN), Individual Demographic Information
|
GCI is federally mandated to verify citizenship status.
|
Information Sharing with Enrollment Professionals
Customers may, at their own discretion, elect to share their personal information with enrollment professionals when requesting assistance with the application and enrollment process. Enrollment professionals include Navigators, whose role was created under the Affordable Care Act (“ACA”) to provide impartial education to customers regarding ACA health/dental plans and subsidies, but who are not permitted to recommend specific plans. Additional enrollment professionals include private insurance agents/brokers, who are certified by GCI to provide ACA education and enrollment assistance, and who may offer plan recommendations based on a customer’s specific requirements. All enrollment professionals are required to comply with the terms of this Notice, as well as other criteria established by GCI.
Before personal information will be shared with an enrollment professional, a potential customer must explicitly designate a Navigator or agent/broker using GCI’s website, or by calling GCI’s customer service call center, and explicitly give their consent. Potential customers may change or terminate their designation at any time.
Individual Access and Correction of Information
In accordance with 45 CFR §155.260, you have the right to access certain Personally Identifiable Information (PII) maintained by GCI. You may view and update your information at any time through the secure user portal on the GCI website. Potential customers/customers are encouraged to review their application information regularly to ensure its accuracy.
If corrections are necessary, you can:
Update information directly in your GCI online account;
Contact the GCI Customer Service Center; or
Work with an authorized enrollment professional who may assist with making corrections on your behalf.
Note: Changes made to your application information may result in a new determination of eligibility for coverage, financial assistance, or other benefits, as required by ACA regulations.
Legal Notices and Safeguards for Protected Information
Access to the GCI website is provided subject to the following terms and conditions. By using this GCI website, you accept these terms.
Operational, Technical, Administrative, and Physical Safeguards
GCI implements multiple layers of safeguards to protect the confidentiality, integrity, and availability of PII and Protected Health Information (PHI). These measures include, but are not limited to:
Technical Safeguards: Firewalls, intrusion detection systems, encryption, secure access controls, and password protection;
Administrative Safeguards: Staff training, access restrictions, and internal policies to prevent unauthorized use or disclosure;
Physical Safeguards: Locked facilities, restricted access areas, and monitoring systems.
GCI also incorporates industry-standard risk management processes into its daily operations to safeguard the information entrusted to us.
Although GCI uses robust security measures, no data transmission over the internet can be guaranteed to be completely secure. GCI is committed to maintaining reasonable protections in compliance with applicable federal and state laws.
Permitted Uses and Disclosures
Pursuant to 42 USC §18081(g)(1), and Section 1411(g)(1) of the ACA, PII and PHI may only be used or disclosed as strictly necessary to:
Authenticate identity;
Determine eligibility for enrollment, Advance Premium Tax Credits (APTC), or Cost-Sharing Reductions (CSR);
Conduct GCI operational activities.
Unauthorized use or disclosure is prohibited and may result in civil and other penalties.
Protection of Federal Tax Information
Pursuant to 26 USC §6103, certain tax return information may be shared with the Federal Data Services Hub to verify eligibility for insurance affordability programs. All such disclosures comply with federal confidentiality and data protection standards.
Retention and Disposal
PII and PHI are retained only as long as necessary to fulfill their intended purpose and are disposed of securely in accordance with State and Federal laws including retention schedules and disposal regulations.
Complaints
To report suspected misuse or improper handling of your PII or PHI, please contact:
GCI’s Deputy Director of Marketplace Compliance & Program Integrity
Email: gci.compliance@illinois.gov
All complaints are reviewed by GCI’s Deputy Director of Marketplace Compliance & Program Integrity and the Illinois Department of Insurance Ethics Officer to ensure appropriate action is taken.
Disclaimer of Liability
Neither the State of Illinois, Get Covered Illinois (GCI), nor any of their employees shall be liable for any improper or incorrect use of the information described or contained on the GCI website. GCI does not assume responsibility for any customer’s use or misuse of such information.
In no event shall the State of Illinois, GCI, or any of their employees be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services; loss of use, data, or profits; or business interruption), however caused and under any theory of liability, arising from or in connection with the use of this website, even if advised of the possibility of such damages.
This limitation of liability applies to all claims, whether based on errors, omissions, interruptions, defects, delays in operation or transmission, computer viruses, unauthorized access, Acts of God, force majeure, or any other cause of action.
Disclaimer of Warranties and Data Accuracy
All information on this website is provided voluntarily and "as is." While GCI strives to present accurate, reliable, and current information, no warranty, express or implied, is made regarding the accuracy, adequacy, completeness, legality, or usefulness of the information.
GCI expressly disclaims all warranties, including but not limited to the implied warranties of merchantability and fitness for a particular purpose, non-infringement of proprietary rights, or freedom from computer viruses.
Changes or updates may be made at any time without notice. Users are encouraged to confirm the accuracy of any information obtained from this site before relying on it.
Note: Errors or omissions should be reported to: gci.compliance@illinois.gov.
Disclaimer of External Links
The GCI website contains links to other related world wide web internet sites and resources. Neither the State of Illinois in general, nor GCI in particular, is responsible for the contents of any off-site pages referenced. The user specifically acknowledges that neither the State nor GCI is liable for the defamatory, offensive, or illegal conduct of other users, links, or third parties and that the risk of injury from the foregoing rests entirely with the user. Links from the GCI web page on the world wide web to other sites do not constitute an endorsement from GCI. These links are provided as an information service only. It is the responsibility of the web surfer and or user to evaluate the content and usefulness of information obtained from other sites. As the GCI website is not responsible for the availability of these outside resources or their contents, you should direct any concerns regarding any external link to its site administrator or webmaster, supra.
Disclaimer of Endorsement
References to third-party products, services, or information do not constitute an endorsement by GCI or the State of Illinois. Any opinions or information provided by third parties are their own and do not necessarily reflect the views of GCI.
Disclaimer of Duty to Provide Uninterrupted Service
GCI does not warrant that the website will operate uninterrupted or error-free. The availability, functionality, and location of content may change without notice due to system updates or reorganization.
GCI is not responsible for technical inaccuracies, typographical errors, or outdated information.
Disclaimer of Legal Advice
The information contained in this website is for informational purposes only and does not constitute legal advice. Individuals should use this site only as a starting point for their research and should not assume that any information contained herein has not been updated and that other information not contained here may exist. Use of this website does not create a relationship, including but not limited to an agency relationship, or an attorney-client relationship, between the user and the Illinois Department of Illinois (DOI), GCI, or any employee of DOI/GCI. The user should not act or rely on the information in this website regarding the application of the information provided to the facts of particular situations.
Security Notice
GCI, as developer and manager of this website, has taken steps to safeguard the integrity of its communications and computing infrastructure, including but not limited to authentication, monitoring, auditing, and encryption. Security measures have been integrated into the design, implementation and day-to-day practices of the entire GCI operating environment as part of its continuing commitment to risk management.
This information should not be construed in any way as giving business, legal, or other advice, or warranting as fail proof, the security of information provided via department supported websites.
Privacy Act Statement
The Patient Protection and Affordable Care Act (Public Law No. 111-148), as amended by the Health Care and Education Reconciliation Act of 2010 (Public Law No. 111-152), and the Social Security Act authorize GCI to collect the information on your application and any necessary supporting documentation, including a Social Security Number, to determine whether you and the listed people on your application are eligible for health coverage and or credit, cost-sharing, or exemption for health coverage.
The GCI application processes allow GCI to determine eligibility for: (1) enrollment in a qualified health plan through GCI; (2) insurance affordability programs (such as Medicaid, APTC, and CSR); and (3) certifications of exemption from the individual responsibility requirement. As part of the application processes, GCI will electronically verify the information you provided on your application; communicate with you or your authorized representative, if you choose to have one; and eventually provide the information to the health plan you select so that they can enroll any eligible individuals in a qualified health plan or insurance affordability program. GCI will also use the information in the future to conduct activities such as verifying your continued eligibility for health coverage or help paying for health coverage, processing appeals, reporting on and managing the insurance affordability programs for eligible individuals, performing oversight and quality control activities, combatting fraud, and responding to any concerns about the security or confidentiality of the information.
While providing the information on the application (including social security numbers and documentation of your immigration status) is voluntary, failing to provide the information may delay or prevent you from obtaining health coverage or help paying for health coverage through GCI. If you provide incorrect information on this GCI form, or knowingly and willfully provide false or fraudulent information, you may be subject to a penalty and other law enforcement action.
In order determine if you and the people on your application are eligible for health coverage, or are eligible for credit, cost-sharing, and or exemption for health coverage, and to operate GCI, we must electronically verify the information you provided on your application with the information in other electronic data sources. Such data sources include:
- Other State and Federal government agencies, such as the Internal Revenue Service (IRS); the Social Security Administration (SSA); and the United States Department of Homeland Security (DHS); the United States Department of Health and Human Services; and the Illinois Department of Healthcare and Family Services;
- Other electronic data sources, including customer reporting agencies;
- Employers identified on applications for eligibility determinations;
- Applicants/enrollees;
- Authorized representatives of applicants/enrollees;
- Agents, Brokers, and issuers of Qualified Health Plans, as applicable, who are certified by GCI to assist applicants/enrollees and who have been authorized to help applicant/enrollees;
- Anyone else as required by law.
This Notice provides the notice required by the Privacy Act of 1974 (5 USC § 552a(e) et seq.
Choice of Law
This Privacy Notice and all disclaimers herein are governed by the laws of the State of Illinois. Any disputes arising from use of this website shall be resolved under Illinois law.
Scope of This Privacy Policy
This policy applies to Get Covered Illinois' official website at http://getcovered.illinois.gov/ and associated services, including the GCI Marketplace Portal.
Footer
1-866-311-1119 (TTY: 711)