NCTracks Privacy and Security


Collecting and using personal data

Welcome to the NCTracks portal, where health care providers and recipients may obtain information about services provided by the North Carolina Department of Health and Human Services, including the Division of Health Benefits (DHB), the Division of Mental Health, Developmental Disabilities, and Substance Abuse Services (DMH/DD/SAS), the Division of Public Health (DPH) and the Office of Rural Health (ORH). This web site is designed to make it easier for North Carolinians to interact with the NCTracks. Like all online resources, we recognize that visitors to this web site are concerned about their privacy.



The NCTracks portal is an advanced website and web application. Cookies are bits of data that a web site can store into your computer browser to help us provide a rich user experience along with also providing us usage data. The use of cookies is a standard practice among Internet websites. To better serve you, we occasionally use "session cookies" to enhance or customize your visit to this website. The cookie does not store any PHI (personal health information) or PII (personally identifying information) and they do not compromise any security or privacy. A session cookie is erased during operation of your browser or when your browser is closed. The use of cookies is required for effective use of the NCTracks portal. Disabling or deleting them may result in unpredictable results.


Information Collected Automatically When Visiting this Website

When visiting this website, the NCTracks portal automatically collects and stores the following information about your visit:

a)    User client hostname. The hostname or Internet Protocol address of the user requesting access to a state agency website.

b)    HTTP header, "user agent". The user agent information includes the type of browser, its version, and the operating system on which that the browser is running.

c)    HTTP header, "referrer". The referrer specifies the web page from which the user accessed the current web page.

d)    System date. The date and time of the user's request.

e)    Full request. The exact request the user made.

f)    Status. The status code the server returned to the user.

g)    Content length. The content length, in bytes, of any document sent to the user.

h)    Method. The request method used.

i)     Universal Resource Identifier (URI). The location of a resource on the server.

j)     Query string of the URI. Anything after the question mark in a URI.

k)    Protocol. The transport protocol and the version used.

None of the foregoing information is deemed to constitute personal information. The information that is collected automatically is used to improve this website's content and to help the NCTracks portal understand how users are interacting with the website. This information is collected for statistical analysis, to determine what information is of most and least interest to our users, and to improve the utility of the material available on the website. The information is not collected for commercial marketing purposes and the North Carolina Department of Health and Human Services is not authorized to sell or otherwise disclose the information collected from the website for commercial marketing purposes.



For site security purposes and to ensure that this service remains available to all users, this Government computer system employs software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage. Anyone using this system expressly consents to such monitoring and is advised that if such monitoring reveals evidence of possible abuse or criminal activity, such evidence may be provided to appropriate law enforcement officials. Unauthorized attempts to upload or change information on this server are strictly prohibited and may be punishable by the state of North Carolina policy and/or law.


Information Collected Through Your Interactions with this Website


Personally identifiable information

The term "personally identifiable information" includes health information and any other information that could reasonably be used to identify you, including your name, address, telephone number, e-mail address, Social Security number, Recipient ID number, birth date or any combination of information that could be used to identify you.

Information voluntarily provided by you.

This web site collects voluntary information from you in three different ways: through e-mails, a registration feature and an authentication feature.

  • E-mail – This web site collects voluntary information from you through any e-mail messages you choose to send to the "Contact Us" feature. Any e-mail messages sent by you to this site will contain personally identifiable information such as your e-mail address and other information you choose to give us to help us answer your inquiry.
  • Registration – In order to engage in certain online transactions and access restricted online information, you will be required to register with the portal by submitting your name, Social Security number, Recipient ID number, Health Plan ID number, or NPI and password.
  • Authentication – In addition, the authentication feature associated with the portal to access your information will use your Social Security number, Recipient ID number, Health Plan ID number, or NPI and password to determine whether you are authorized to conduct the transaction.


Contact Information

For questions regarding this privacy notice, please contact:
  NCTracks Privacy Officer
  PO Box 300009
  Raleigh, NC 27622-8009