yourstate.us
42 CFR 480.107

§ 480.107 Limitations on redisclosure.

United States · 42 CFR — Public Health · Status: effective

Get this as JSONEmbed this
Cite this
Citation
42 CFR 480.107, § 480.107 Limitations on redisclosure, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/207107
Permanent ID
ys:prov:207107@1
SHA-256
0c76f2b65e52735f7a70abca84ca5982b0a053e33df8b1a6d6adb2a14d2ea5af

The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.

Full text

Persons or organizations that obtain confidential QIO information must not further disclose the information to any other person or organization except— (a) As directed by the QIO to carry out a disclosure permitted or required under a particular provision of this part; (b) As directed by CMS to carry out specific responsibilities of the Secretary under the Act; (c) As necessary for CMS to carry out its responsibilities for appeals under section 1155 of the Act or for CMS to process sanctions under section 1156 of the Act; (d) If the health care services furnished to an individual patient are reimbursed from more than one source, these sources of reimbursement may exchange confidential information as necessary for the payment of claims; (e) If the information is acquired by the QIO from another source and the receiver of the information is authorized under its own authorities to acquire the information directly from the source, the receiver may disclose the information in accordance with the source's redisclosure rules; (f) As necessary for the General Accounting Office to carry out its statutory responsibilities; (g) Information pertaining to a patient or practitioner may be disclosed by that individual provided it does not identify any other patient or practitioner; (h) An institution may disclose information pertaining to itself provided it does not identify an individual patient or practitioner; (i) Governmental fraud or abuse agencies and State licensing or certification agencies recognized by CMS may disclose information as necessary in a judicial, administrative or other formal legal proceeding resulting from an investigation conducted by the agency; (j) State and local public health officials to carry out their responsibilities, as necessary, to protect against a substantial risk to the public health; or (k) As necessary for the Office of the Inspector General to carry out its statutory responsibilities. (l) Redisclosures of information that is confidential because it identifies the parties involved in immediate advocacy may occur if all parties have consented to the redisclosure, as provided for under § 476.110(c) of this chapter.

Legislative history

This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.