US · guidance
CMS Pub. 100-01, ch. 6, § 40.2
The Authority for Disclosure
Regulation No. 1 of the Act defines the basic authorization for disclosure of information
obtained in the administration of the program. The general rule is that information about
an individual obtained in the administration of the program may not be disclosed without
the authorization of that individual. Medical information relating to an individual will
generally be disclosed under more restrictive conditions than other information and,
where permitted, usually may be furnished only upon the written authorization of the
individual. Specific exceptions to this rule are detailed in the following sections. As far
as program operations are concerned, information about an individual may be disclosed
without the individual's authorization when the disclosure is necessary in connection with
any claim, or other proceeding, under the Social Security Act.
Information will be disclosed for other than program purposes only if the disclosure is
authorized by Regulation No. 1 and is consistent with the proper and efficient
administration of the program.
History
(Rev. 1, 09-11-02)
Provenance
- Source
- cms.gov
- Retrieved
- 2026-08-25
- Edition
- iom-2026-08-25
- Content hash
c688c62e340dcc06a01ddcd9a1902c7b694f8ea8e2335600f744bff5b66e0002
The link goes to the issuing authority’s own document — the one we read to produce this record. Where a source publishes whole titles rather than sections, your browser may need a moment to jump to the provision.
Unofficial copy of government-published law, reproduced from official sources with full provenance. Not an official publication; verify against official sources before relying on it in a filing. Records in the 'guidance' corpus, and only that corpus, are sub-regulatory (interpretive guidelines, survey procedures) and are not binding law. Validity bounds follow each jurisdiction's declared temporalBasis.