Who owns claims data when a TPA administers the claims?

In most TPA arrangements the claim file belongs to whoever bears the risk: the insurance carrier on fully insured business, or the self-insured employer or plan on self-funded programs. The TPA acts as custodian. A TPA can usually license only its own operating records, plus client claim material that clients consent to and that is de-identified first.

The short answer: the risk-bearer owns the file, the TPA owns its process

A third-party administrator usually holds claims data as a custodian, not as its owner. On fully insured business the claim file belongs to the carrier that issued the policy; on self-funded programs it belongs to the self-insured employer, public entity or plan that pays the losses. The claims service agreement or administration agreement is the document that settles it, so read that before anyone mentions licensing.

What a TPA owns outright is narrower but still real: the way it handles claims. Its desk procedures, file audit methodology, training curriculum, staffing models, internal communications and operating metrics are its own business records. Those can be candidates for a data license once client information inside them is removed, and claim-level material can be added only where clients agree.

Who controls the claim file in common TPA arrangements

The answer follows the money. Whoever pays the claims normally controls the file, and the administrator works on its behalf.

ArrangementWho pays the lossesWho usually controls the claim fileWhat to confirm in the agreement
Carrier outsources claims on fully insured policiesInsurance carrierCarrierRecords ownership, audit rights, return of files at termination
Self-insured workers' compensation programEmployer or public entitySelf-insured clientOwnership clause, regulator access, limits on data use
Liability program with a self-insured retentionClient within the retention, carrier above itShared: client and carrier both have rightsWhich party controls files below and above the retention
Self-funded group health planThe plan, funded by the employerThe plan; the claims are protected health informationTreat as out of scope unless de-identified or authorized
Captive or risk retention groupThe captiveThe captive and any fronting carrierCaptive manager and fronting agreements
Independent adjusting firm on carrier assignmentsCarrierCarrier; the adjusting firm supplies work productAssignment terms in the vendor agreement

Copyright authorship is a separate question from file ownership

Who wrote the notes and who controls the file are different legal questions, and both matter. The Copyright Office's circular on works made for hire explains that work an employee prepares within the scope of employment is authored by the employer, while commissioned work from an outside contractor counts as made for hire only in listed categories and with a signed written agreement. Diary notes written by a TPA's staff adjusters are therefore generally the TPA's work, while notes from independent adjusters on contract may not be unless their contracts assign the rights.

Authorship does not override the client contract. An administration agreement can still give the carrier or self-insured client ownership of the whole file, restrict any use beyond administering claims, and require return or destruction when the relationship ends. Both answers need to line up before claim-level notes go anywhere.

This is general information, not legal, tax or financial advice. Confirm with your own counsel before acting.

What a TPA can usually license, and what needs client consent

Use a simple rule, the file-or-process test. If a record describes a specific claimant's claim, treat it as the client's. If it describes how the TPA runs its operation, treat it as the TPA's, subject to a confidentiality review.

RecordOwner to confirmLicensing route
Claim handling guidelines and desk manuals the TPA wroteTPACandidate after confidentiality review
File audit forms, scoring rubrics and audit methodologyTPACandidate; the scored files themselves follow the client
Adjuster diary notes, reserve worksheets, coverage lettersCarrier or self-insured clientOnly with client consent and agreed de-identification
Caseload, cycle-time and staffing reportsTPA, derived from client claimsUsually in aggregate; check each agreement's data-use clause
Training curricula, onboarding modules, calibration recordsTPACandidate
Internal email and Teams threads about operationsTPACandidate after claimant details are redacted
Recorded statements and first-notice-of-loss callsClient file, plus recording-consent rulesUsually excluded
Medical bills, medical records and health plan claimsClient or plan; health dataOut of scope unless de-identified or authorized

What makes claim-level notes worth the consent effort is explained in the claims notes data brief.

Checklist before an operating partner makes the introduction

Run this with the TPA's CEO and general counsel. It takes one meeting and prevents an introduction that stalls on rights.

  • List the largest clients by claim volume and pull each administration agreement.
  • Note who owns claim files, what happens to them at termination, and whether aggregated or de-identified use is permitted.
  • Separate fully insured carrier business from self-funded client programs, because the consent conversation differs.
  • Check independent adjuster and vendor contracts for assignment of work product.
  • Flag lines that are mostly health information, such as group health and workers' compensation medical.
  • Confirm the TPA itself had 50+ full-time employees at peak, with contract adjusters excluded from the count.
  • Identify who can approve a license: the owner, CEO, CFO or another authorized representative.
  • Confirm someone can export the TPA's own operating records from the systems that hold them.

How to respond when the CEO says the data belongs to clients

The CEO is usually right about the claim files, and the reply should say so. Then narrow the question to what the TPA owns.

If a few large self-insured clients seem open to it, the CEO can raise it with them directly. Partners never approach a TPA's clients and never handle the records.

When the concern is valid

Sometimes the objection holds and the right call is to stop:

  • Nearly all the useful history sits inside client claim files and no client will consent.
  • The book is mostly health claims or medical bill review.
  • Major clients have left and their files were transferred out.
  • The TPA's own procedures are thin, undocumented or copied from client manuals.
  • The administration agreements forbid any use beyond claims administration, including de-identified use.

In those cases, look elsewhere in the portfolio. The same ownership logic applies to warranty administrators, whose warranty claims records are often tied to manufacturer programs, and to MGAs, covered in MGA data ownership and carrier rights.

How the introduction runs once the rights are clear

  1. The operating partner introduces the TPA through the referral form, or sends the CEO a referral link to apply directly.
  2. SourceX confirms headcount, operating history, the systems involved and which records the TPA owns.
  3. The TPA lists its own systems and records as metadata only; the data inventory builder is a practical starting point.
  4. SourceX and the TPA agree price, scope, exclusivity and redaction rules before any buyer sees a description.
  5. AI labs and data buyers review the opportunity; delivery happens only after a signed agreement and the TPA's authorization.

Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company, paid only after the buyer pays and SourceX receives its fee. No reward is guaranteed.

Next step

Compare the TPA's profile with who qualifies. When the file-or-process test points to records the TPA owns, register as a partner and make the introduction. Other portfolio screens for sponsors are on the operating partner page.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Buyer selects and paysThe buyer selects and pays for the data and SourceX receives its fee.
  4. Step 4You get your rewardYour share of SourceX fees becomes payable.

Common questions

Can a TPA use de-identified claims data without client consent?

Only if its administration agreements allow it. Agreements differ: some permit aggregated or de-identified use for benchmarking or service improvement, others are silent, and silence is not permission. Because licensing records for AI training is a new kind of use, most TPAs are better served by asking clients for written consent than by relying on a general clause. Counsel should read each agreement first.

Do independent adjusting firms own their field notes?

Usually not in the sense that matters for licensing. Notes, photos and estimates prepared on a carrier assignment become part of that carrier's claim file under the vendor agreement. An adjusting firm's own scheduling, routing, estimate review, training and quality records are more likely to be its own, subject to confidentiality and to how its contracts with field adjusters assign work product.

What happens to a TPA's copies of claim files when a client leaves?

The administration agreement normally decides. Files are transferred to the client or its new administrator, and the TPA keeps copies only where the agreement, a legal hold or a regulator requires it. Retained copies do not become the TPA's to license. Only the TPA's own operating records from that period, with client details removed, remain available for a license.

Could a self-insured employer license its own claims data instead?

In principle the owner of a file can license it, but employee injury and medical information makes most self-insured claims files a poor fit. Health and personal data must be de-identified or authorized, and employees may not have expected their claims to be used this way. Self-insured employers are better screened for operating records held in other systems, such as support, engineering or operations.

Do contract adjusters count toward the headcount baseline?

No. The baseline is 50+ full-time employees at peak, and contractors are excluded. A TPA that relies on pools of independent or catastrophe adjusters should count only its own full-time staff at the busiest point in its history. A TPA with a large in-house claims team may clear the baseline comfortably, while a small adjusting firm that dispatches contractors may not.

Free resources

By SourceX Partnerships Team · Published 2026-10-09 · Updated 2026-10-09

Know a US company with valuable proprietary data?

Become a referral partner from anywhere we support, get your link and introduce an owner or authorized decision-maker.

Refer a company →

I own a business

Explore licensing your company's data to AI developers worldwide. Start a short assessment; no uploads needed.

Start an assessment