Remote Identity Proofing (RIDP)
You have probably seen in the news stories about repeated breaches of information in the entertainment, financial, and health care industries. To ensure security of Medicare data, CMS is changing the Enterprise Identity Management (EIDM) system to require Remote Identity Proofing (RIDP) for all new EIDM users, including all new myCGS registrations, beginning September 2, 2016. RIDP is the process of validating sufficient personal information that uniquely identifies you (e.g., credit history, personal demographic information, and other indicators). In other words, RIDP is a process that helps to ensure that you are who you say you are.
Beginning September 2, 2016, when new users request access to myCGS through EIDM, they must pass the identity proofing process to gain access. CMS uses the Experian identify verification system to remotely perform identity proofing.
Note: All users who have successfully registered for myCGS by September 1 at 4:00 PM Central Time will be grandfathered and will not be required to complete RIDP.
In order to assist you with the RIDP process, CGS has put together a list of Frequently Asked Questions below. Additionally, CMS has produced an EIDM Training Video on YouTube with instructions about registering in EIDM with RIDP.
RIDP Frequently Asked Questions (FAQs)
- What is Remote Identity Proofing (RIDP)?
RIDP is the process of validating sufficient information about you (e.g., credit history, personal demographic information, and other indicators) to uniquely identify you. If you are requesting electronic access to protected CMS information or systems, such as the CMS Enterprise Identity Management (EIDM) Portal in order to access myCGS, you must be identity proofed to gain access. CMS uses Experian, an external identification verification provider, to remotely perform identity proofing.
You may have already encountered RIDP through various interactions with banking systems, credit reporting agencies, and shipping companies. The Experian identity verification service is used by CMS to confirm your identity when you need to access a protected CMS Application. When you log in to EIDM and request access to myCGS, you will be prompted to complete RIDP if you have not been previously identity proofed to the level of assurance required by EIDM. You will be asked to provide a set of core credentials which include:
- Full Legal Name
- Social Security Number
- Date of Birth
- Current Residential Address
- Personal Phone Number
The Experian identity verification service will use your core credentials to locate your personal information in Experian and generate a set of questions, referred to as out-of-wallet questions. Experian will attempt to verify your identity to the appropriate level of assurance with the information you provided. Most users are able to complete the ID proofing process in less than five minutes. If you encounter problems with RIDP, you will be asked to contact Experian Support Services via phone to resolve any issues.
- What happens to the data submitted for identify proofing?
EIDM collects your personal information, described as data that is unique to you as an individual, such as name, address, telephone number, Social Security Number, and date of birth. EIDM only collects personal information to verify your identity. Your information will be sent to Experian, an external identity verification provider, to help confirm your identity.
Experian verifies the information you provide against their records and may present you with questions based on your credit profile, called out-of-wallet questions. The out-of-wallet questions and answers, including financial history, are strictly between you and the RIDP service Experian; neither CGS nor CMS will store them. Experian is required by law to securely maintain this data for seven years. For more information regarding how CMS uses the information you provide, please read the CMS Privacy Act Statement.
- Will my Social Security Number (SSN) be shared with any federal or private agency?
Your SSN will be used for verification purposes only. EIDM does not share your SSN with any federal or private agency. CGS does not receive your SSN.
- Do I need to use my personal contact information?
When you register for an EIDM account, you will be prompted to enter your personal contact information, including your home address. It is important that you use your correct home address (not business address) when prompted, otherwise you may fail the RIDP process.
- Will RIDP affect my credit?
No, this type of inquiry does not affect your credit score and you will not incur any charges related to this credit score inquiry. When you identity proof, Experian creates something called a soft inquiry. Soft inquiries are visible only to you, the consumer, and no one else. Soft inquiries have no impact on your credit report, history, or score other than being recorded and maintained for 23 months.
- What If I have problem completing Identity Verification? Is there an Experian Help Desk?
Yes, the Experian Help Desk is a dedicated call center for individuals who have failed being proofed online while attempting to obtain a CMS EIDM credential. The Experian Help Desk can be contacted at 1-866-578-5409. The Experian Help Desk is open Monday through Friday from 8:30 a.m. to 10:00 p.m., Saturday from 10:00 a.m. to 8:00 p.m., and Sunday from 11:00 a.m. to 8:00 p.m., Eastern Standard Time.
For additional information, please see the Experian Consumer Assistance link: Experian Customer Assistance.
- What happens if my identity cannot be verified during the online RIDP process?
If Experian cannot identity proof you online, you will be asked to contact the Experian Verification Support Services Help Desk. The system will provide you with a reference number to track your case. The Experian Help Desk cannot assist you if you do not have the reference number. If the Experian Verification Support Services Help Desk cannot successfully identity proof you by phone, you will be advised to call the myCGS Help Desk for assistance.
For additional FAQs, refer to the CMS RIDP Frequently Asked Questions.