News

Last Updated: February 9, 2026

Our Commitment to Privacy

The National Resident Matching Program^® (“NRMP^®”), a non-profit organization, collects, uses, and discloses Personal Information that you provide or that is generated or received in connection with NRMP’s matching services including our websites, applications, and technology platforms (collectively, the “Services”). “Personal Information” as used in this Privacy Statement refers to information that is related to an identified or reasonably identifiable individual. NRMP is the data controller with respect to the processing of Personal Information as described in this Privacy Statement

Please Read this Privacy Statement (and any applicable Participation Agreement) Carefully 

By using the Services or otherwise choosing to provide us with your Personal Information, you acknowledge that NRMP processes your Personal Information in accordance with this Privacy Statement. If you are an applicant utilizing our matching services, our use of Personal Information is further addressed in the applicable Participation Agreement. 

Personal Information We Collect and Use 

NRMP collects and otherwise processes Personal Information received from medical students and graduates, medical schools, medical licensing authorities, graduate medical education programs, credentialing agencies, and other third-party sources. NRMP does so to provide you with the Services, to engage in research for specific purposes, to improve our products and services, and for typical operational purposes (including security and anti-fraud purposes). Depending on your use of the Services, the information NRMP collects will fall into categories described below. 

Registration and R3^® System. We collect your name, date of birth, identification numbers, contact information (email address, telephone number, address), institutional affiliation, and other biographical information like place of birth and citizenship status when you create a user account in our password-protected website (the Registration, Ranking, and Results^® (“R3^®”) system), when you update your Personal Information, when you register for a Match or SOAP, or when you submit a rank order list. We also collect your education, training, registration/licensure, and professional/volunteer and employment information when you create a user account in the R3^® system. We process this information to provide the Services for you and to verify your identity. In addition, with certain exceptions (such as the restricted handling of rank order lists) as set forth in the applicable Participation Agreement, we may process this information in an anonymized format for research and analysis purposes, to improve our products and services, and in the normal course of our operations. 

Communications. We collect a record of communication(s) we have with you (such as emails, letters, telephone calls, messages sent through our social media pages, and feedback submissions). We process this information when you contact us or when we contact you, and we do so to address the subject of the communications in the normal course of our operations. 

Payment details. We may collect your payment card details when you submit any payment for the Services. Your card details are transmitted to and processed by our third-party payment processor. 

Preferences. We collect information about your preferences when you participate in our Matching programs, to help guide further development and updates to our Services, and when we conduct surveys for specified educational and research purposes.  

Social media. If you post information on a webpage we establish on a social media platform, we may consider the message you convey, use the information to respond, and in the normal course of our operations. We may collect personal identifiers, such as your social media username, and other personal characteristics that you have made publicly available on the social media website, in accordance with the rules and policies of the social media platform. Note that the third-party operators of social media platform also receive such information, and their use of your Personal Information is governed by their privacy policies. 

Browsing details. We collect your Internet Protocol (“IP”) address, device identifiers, navigational history, and web log data when you use our website including for purposes of participation in the Matching programs, as further described in the “Automatically Collected Data and Aggregated Information” section below. 

Employment details. We collect your name, contact information (email address, telephone number, address), employment history, and list of references when you apply for a job at NRMP to consider your candidacy. 

Data Collected from Other Sources  

We may verify information you provide or, at your instruction, collect information from third parties (such as licensing authorities, educational institutions, or credentialing authorities) to include as part of your profile in connection with a Matching program. 

De-identified Data; Sharing of Data for Research Purposes  

We may aggregate and de-identify Personal Information we receive, and we may use and disclose de-identified data for any legitimate purpose, including for research and analytics purposes, to improve our products and services, for academic studies in relevant fields (such as the field of preference and selection sciences), and to facilitate our service providers’ work for us. In some cases, we may remove personal identifiers from Personal Information or may use pseudonymization to disassociate the individual from the Personal Information, allowing statistically accurate analysis of data without exposing any individual’s identity. In some cases, we may provide pseudo-anonymized Personal Information to third-party researchers, but we will only do so subject to confidentiality obligations (including an obligation not to attempt to re-identify the data), and we do not provide such researchers with a “key” or “index” to any pseudo-anonymized data set. 

In addition, NRMP collects data for internal reporting and tracks, counts, and aggregates website visitors’ activity for the purpose of analyzing general traffic flow and feature usage related to NRMP websites. To those ends, NRMP may include information about you in aggregated group data.   

NRMP may from time to time prepare surveys and otherwise analyze available data for educational and research purposes, including for reporting on a de-identified or aggregate basis to other participants in the Matching programs and for providing summary information to the U.S. Congress and other federal and state policymakers. Whenever NRMP conducts research using private Personal Information (i.e., human subjects research) that falls under the revised Common Rule, that research is reviewed by an external (to NRMP) institutional review board whose responsibility is to protect the interests of the individuals involved. 

Automatically Collected Data: Cookies and Similar Technologies 

When you use our Services, NRMP and trusted third parties may collect information from our website by automated means. This includes the use of cookies and similar technologies such as web beacons, pixels, and web-server logs. Such technologies may be used to collect personal identifiers (such as your IP address), information about your device (such as your browser characteristics, device IDs and characteristics, and operating system version) and information concerning your usage of our Services (including the link you used to reach a given webpage).  

We also collect, for our internal use only, information about your interaction with the Services, including the details of your visits and information generated in the course of using our Services, such as mouse movements, clicks, page visits, text entered, how long you spent on a page, and other details of your actions on our Services. 

We use this information for security and anti-fraud purposes, and to improve the overall quality of your online experience and learn about how our website is used, including to review and analyze traffic flows and feature usage, to determine how many users have visited particular webpages, viewed particular content, or opened messages or alerts. This helps us establish, maintain, and manage our relationship with you, and also helps us to optimize and provide the Services for your use and benefit, to improve our outreach, to provide troubleshooting support, and to enforce our service terms and prevent malicious conduct. 

In some cases, our third-party partners may process information collected by cookies and similar technologies that we permit them to use on the Services. For example, we, like many other websites, use cookies or similar technologies provided by Google Analytics to collect and process website usage data to better understand and personalize your use of the Services. Google Analytics collects information like how often users visit our Services, what pages they visit, and what website they used prior to coming to our Services. Google Analytics may use various technologies, including cookies or similar technologies, to identify your browser or computer device. Google does not receive your user account information or your email address through the use of Google Analytics cookies on our Services. You can learn more about Google Analytics privacy here.  

With respect to any social media platforms on which we may establish a presence, please see the privacy policies and any cookie policies of the applicable social media providers as to their automated data collection practices. 

Opting Out of the Use of Cookies and Similar Technologies 

You may be able to configure your web browser’s settings to block and delete cookies when you access the Services through that web browser. However, if you do so, the Services may not work properly, and we will still receive basic information (such as last URL visited) when you navigate to the Services.  

The third-party provider of a given cookie may provide an opt-out tool for that cookie. As referenced above, opt-out functionality is available here for Google Analytics. Please note that you will need to set preferences on each device you use to visit the Services. The Services do not currently respond to browser do-not-track signals. 

In addition, you may opt out of receiving personalized advertisements on your browser or device from advertisers who are members of the Network Advertising Initiative or who subscribe to the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt-out options of each of those organizations, set forth respectively at http://www.networkadvertising.org/choices and http://www.aboutads.info/choices.

Note that, when you opt out of personalized advertising, you may continue to see online advertising on the Services and/or our ads on other websites and online services. Also, given that many opt-outs themselves use a cookie to effectuate an opt-out preference, you may need to opt-out again if you clear cookies on your browser. 

NRMP may implement preference management via a “Your Privacy Choices” link on the homepage of our website. Such a tool will permit you to make choices regarding certain categories of cookies and related technologies and will also honor a recognized global privacy control setting that you place on your browser. 

Disclosure of Personal Information  

We may disclose some of your Personal Information to, or obtain related information from, the following: 

• Programs. We disclose Match results and your profile information to sponsoring institutions, residency programs, and medical schools, as appropriate (along with any other information you upload for purposes of disclosure to such programs), in connection with the Services as requested by you. Preference-related information may also be shared in the normal course of the Matching process. 
• Service Providers. We may disclose your Personal Information subject to confidentiality obligations to service providers that work with or on behalf of NRMP to perform services in connection with the Services or our other business operations. Such services may include payment processing, cloud hosting, employment application processing, credentialing and identity verification, translations, and professional advisers. We do not permit such service providers to use Personal Information for their own marketing purposes.  
• With Your Consent: Personal Information may be disclosed to other organizations, with your consent, for certain research and analysis purposes.  
• With your Authorization: Personal Information may be disclosed to other organizations with your authorization, as obtained through the applicable Participation Agreement, including for verification purposes, to sync updated contact information with other organizations, to establish a Match, or for reporting purposes.  
• Legal and Similar Disclosures. We may provide information about you, including Personal Information, when we believe it is necessary to respond to subpoenas, court orders, mandatory legal processes, or in connection with law enforcement or regulatory authority investigations, or to establish or exercise our legal rights or defend against legal claims, or when we believe it is necessary to share such information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law. 

Data Retention 

We maintain your Personal Information only for as long as is reasonably necessary to achieve the purposes for which it was collected, whether that is to provide Services to you, for our own purposes (as described in this Privacy Statement), or so that we can comply with the law. 

We periodically review the Personal Information we hold and when there is no longer a legal or operational need for us to hold it, we either delete it or, in some cases, de-identify it. When we delete information, it will be deleted from our active databases but may remain in our backups until it is overwritten. 

Information Security 

To prevent unauthorized access, maintain data accuracy, and facilitate the correct use of Personal Information processed in connection with our Services, we have implemented physical, technical, and administrative measures to safeguard such Personal Information against unauthorized access, unlawful use, accidental loss, corruption, or destruction. As a general matter, we restrict access to Personal Information to individuals who require the access for legitimate purposes, such as a role in providing Services to you or performing research. We strive to process your information securely, in accordance with this Privacy Statement, and in accordance with information security requirements imposed by applicable law. Note, however, that Internet communications are not completely secure, and we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf. 

If you have an account for use of the Services, you must guard and protect the confidentiality of your account credentials. Do not share such credentials with anyone, and notify us immediately if the security of your credentials is compromised.  

Processing of Personal Information in the United States 

NRMP is located in and subject to the applicable laws of the United States. We store and process information we receive about you, as described in this Privacy Statement, in the United States. If you are located outside the United States and provide information to us, you acknowledge and agree to processing in the United States as described in this Privacy Statement and in accordance with applicable United States law. 

Personal Information Rights 

Certain state laws impose specific legal requirements and privacy rights with respect to Personal Information, and in some cases those laws may apply to non-profit institutions such as NRMP. NRMP will comply with all legal requirements applicable to it, including responding to Personal Information requests as required by applicable law.  

If you believe (a) you have rights under the law of your jurisdiction, (b) that law applies to NRMP, and (c) you wish to exercise those rights, please contact us as set forth below. 

Note that, as a general matter, access to your Personal Information is available through your NRMP account. When you register for an NRMP Matching program, you have an opportunity to correct or update most information you have provided using our Services. If you are an existing NRMP registered participant, you can log in to your NRMP account to update the details held there. In the alternative and in some cases to correct and update certain types of information (e.g., date of birth, name), you may contact NRMP directly as set forth below. 

To submit a request, please contact us at datarequest@nrmp.org or write to us at National Resident Matching Program, Attn: Data Protection, 455 Massachusetts Ave NW, Suite 310, Washington, DC 20001. To protect your privacy and security, we may take steps to verify your identity before acting on your requests.  

We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response. 

Links to Third-Party Websites 

The Services may contain links to other websites, and other websites may link to the Services. This Privacy Statement does not apply to Personal Information that you submit to the websites of our business partners or any other third parties or that are collected by them from you, even if those third-party websites are linked to our Services. We are not responsible for the privacy practices of such other websites. When you visit another website – via a link from the Services or otherwise – you should review the privacy policy of that other website. This Privacy Statement applies solely to information provided or obtained on our Services. 

No Use by Children Under the Age of 13 

The Services are not intended for use by children under the age of 13. If you are under the age of 13, you may not use our Services. We do not knowingly collect, maintain, or use Personal Information from children under 13 years of age. If we believe that any Personal Information has been provided by a child under the age of 13, we will promptly delete that information. Parents may contact us using the methods set forth in the “Contact Us” section to request that information concerning their child be removed from our Services. 

Contact Us

If you have any questions, comments, requests, or concerns related to this Privacy Statement or NRMP’s processing of Personal Information, please contact NRMP at support@nrmp.org or at: National Resident Matching Program, 455 Massachusetts Ave NW, Suite 310, Washington, DC 20001. 

Changes To This Privacy Statement

NRMP may, at any time and from time to time, make changes to this Privacy Statement. If the changes are material, we will post advance notice of such changes on the footer of our website. Any changes to this Privacy Statement will be effective when posted unless another date is referenced. We recommend you check the Privacy Statement on a regular basis so that you know the current terms and conditions that apply to you. If you use our Services after any changes are effective, you agree that the then-current Privacy Statement will apply to Personal Information that is thereafter collected.