Disclosure of predictive modeling and other analytics technologies to identify and prevent waste, fraud, and abuse

For provisions relating to the use of predictive modeling and other analytics technologies to identify and prevent waste, fraud, and abuse with respect to the Medicare program under subchapter XVIII, the Medicaid program under subchapter XIX, and the Children’s Health Insurance Program under subchapter XXI, see section 1320a–7m of this title. In implementing such provisions under such section 1320a–7m with respect to covered algorithms (as defined in subsection (c)), the following shall apply: The covered algorithms used or developed for purposes of such section 1320a–7m (including by the Secretary or a State (or an entity operating under a contract with a State)) shall be exempt from disclosure under section 552(b)(3) of title 5. A State agency may not use or disclose covered algorithms used or developed for purposes of such section 1320a–7m except for purposes of administering the State plan (or a waiver of the plan) under the Medicaid program under subchapter XIX or the State child health plan (or a waiver of the plan) under the Children’s Health Insurance Program under subchapter XXI, including by enabling an entity operating under a contract with a State to assist the State to identify or prevent waste, fraud, and abuse with respect to such programs. A State agency shall have in effect data security and control policies that the Secretary finds adequate to ensure the security of covered algorithms used or developed for purposes of such section 1320a–7m and to ensure that access to such information is restricted to authorized persons for purposes of authorized uses and disclosures described in subparagraph (A). State agencies to which information is disclosed pursuant to such section 1320a–7m shall adhere to uniform procedures established by the Secretary. In this section, the term “covered algorithm”—