CMS Pub. 100-08, ch. 1, § 1.6

Documents

(Rev. 508; Issued: 03-07-14, Effective: 04-08-14, Implementation: 04-08-14)

A. Contractors to Which This Section Applies

This section applies to MACs, CERT, Recovery Auditors, and SMRC.

B. General

Contractors shall maintain the confidentiality of all MR medical records and documents

before, during, and after the MR process. Similarly, contractors that use a

subcontractor(s) to perform MR, to store MR documents, and/or to transport MR

documents, are responsible for ensuring that the subcontractor(s) maintains the

confidentiality of the MR documents that it handles. This responsibility applies to all

contact with these documents by all parties and entities, however derived from the

contractor. The responsibility is not limited or ended if the subcontractor allows an

additional party or entity to have contact with these documents. Thus, just as the

contractor shall assure that the subcontractor maintain confidentiality itself, so too shall

the contractor assure that the subcontractor similarly assures that any third party or other

entity, such as a sub to the subcontractor, which has contact with the documents, maintain

confidentiality.