Disclosure and Accounting Protected Records by CMS Between 2006 and 2011.

摘要

The Centers for Medicare & Medicaid Services (CMS) maintains millions of records containing financial and health-related information. Inappropriate disclosures of records or data maintained in a system of records (SOR) can result in loss of privacy and fraudulent activities. The Privacy Act of 1974 (Privacy Act) governs Federal agencies collection, use, and dissemination of individuals records maintained in an SOR. CMS maintains SORs, and its disclosures of records must be consistent with the Privacy Act. Further, the Privacy Act requires CMS to implement safeguards that protect records maintained in an SOR and to account for any disclosures. Among other things, CMS uses a data use agreement (DUA) to ensure its disclosures are in compliance with the Privacy Act. A DUA is the legally binding agreement that contains the written terms and conditions that govern each disclosure. Entities are required to submit a DUA and DUA-related documents to CMS prior to the disclosures.