Medicaid Data Access

For publicly available data, please visit Health Data NY

New Requests

Organizations who do not have a contract with OHIP must complete an MCD Sponsorship Request Form describing the organization´s business need to access MCD. The request must include a description of the project and how the requestor intends to use MCD to administer the NYS Medicaid program. Completed forms must be submitted to the Security and Privacy Bureau at: doh.sm.Medicaid.Data.Exchange@health.ny.gov. The OHIP sponsorship team will review the completed submission to determine whether OHIP will sponsor the request. For an MCD Sponsorship Request Form please contact the OHIP Security and Privacy Bureau at: doh.sm.Medicaid.Data.Exchange@health.ny.gov.

STEPS Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7
 
Requestor submits completed MCD Request Form
Requestor notified of sponsorship decision
Requestor submits data-sharing packet
Requestor meets MCD security requirements
Requestor receives acccess to MCD
Requestor receives access to MCD
Project close-out
Requestor submits completed MCD Request Form Requestor notified of sponsorship decision Requestor submits data-sharing packet Requestor meets MCD security requirements Requestor receives access to MCD Requestor updates DUA, BAA, names list as needed Project close-out
Forms MCD Sponsorship Request Form (PDF) No form required Names List Form (XLSX)

Additional forms will be provided to sponsored requestors		 No form required No form required Form provided to sponsored requestors Data Destruction Affidavit 2020
(Word) - (PDF)
Guidance MCD Sponsorship Request Form Guidance

Research and MCD Guidance

What is MCD Sponsorship?

What is publicly available Medicaid Data?		 No guidance Data Use Agreement Guidance

BAA Guidance

Names List Guidance		 Security Requirements Guidance MCD Access Guidance Data Use Agreement Addendum Guidance MCD Project Closeout Guidance
Contact The OHIP Security and Privacy Bureau: doh.sm.medicaid.data.exchange@health.ny.gov
Incidents MCD Requestors must notify OHIP any time an unauthorized party accesses MCD

Incident Guidance

Incident Form
STEPS Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8
 
Requestor contacts Security & Privacy Bureau
Requestor submits completed MCD Request Form
Requestor notified of sponsorship decision
Requestor submits data-sharing packet
Requestor meets MCD security requirements
Requestor receives acccess to MCD
Requestor receives access to MCD
Project close-out
OHIP contracts with entity to administer the NYS Medicaid Program OHIP contract manager notifies Security & Privacy Bureau of executed contract and data needs Requestor and OHIP Contract Manager provide requested information Requestor submits data-sharing packet Requestor meets MCD security requirements Requestor receives access to MCD Requestor updates DUA, BAA, names list as needed Project close-out
Contact The OHIP Security and Privacy Bureau: doh.sm.medicaid.data.exchange@health.ny.gov
Incidents NYSDOH OHIP Contractors and Vendors must notify OHIP any time an unauthorized party accesses MCD

Incident Guidance

Incident Form
STEPS Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7
 
Requestor submits completed MCD Request Form
Requestor notified of sponsorship decision
Requestor submits data-sharing packet
Requestor meets MCD security requirements
Requestor receives acccess to MCD
Requestor receives access to MCD
Project close-out
OHIP Program Manager notifies Security and Privacy Bureau of Program data needs OHIP Program Manager provides request information to Security & Privacy Bureau Requestor submits data-sharing packet to Security and Privacy Bureau Requestor meets MCD security requirements Requestor receives access to MCD Requestor updates DUA, BAA, names list as needed Project close-out
Contact The OHIP Security and Privacy Bureau: doh.sm.medicaid.data.exchange@health.ny.gov
Incidents NYSDOH OHIP Programs must notify OHIP any time an unauthorized party accesses MCD

Incident Guidance

Incident Form