US · guidance
CMS Pub. 100-11, ch. 12, § 50
HIPAA Privacy
A PACE organization must establish written policies and implement procedures to do the
following:
• As discussed in section 40 above, safeguard the privacy of any information
that identifies a particular participant. Information from, or copies of, records
may be released only to authorized individuals. Original medical records are
released only in accordance with Federal or State laws, court orders, or
subpoenas;
• Maintain complete records and relevant information in an accurate and timely
manner;
• Grant each participant timely access, upon request, to review and copy his or
her own medical records and to request amendments to those records; and
• Abide by all Federal and State laws regarding confidentiality and disclosure
for mental health records, medical records, and other participant health
information, including information that qualifies as protected health
information (For example, see PACE Manual Chapter 2 and
http://www.cms.hhs.gov/HIPAAGenInfo/Downloads/HIPAALaw.pdf for
further information on HIPAA).
[42 CFR § 460.200(e)]
History
(Rev. 2, Issued: 06-09-11; Effective: 06-03-11; Implementation: 06-03-11)
Provenance
- Source
- cms.gov
- Retrieved
- 2026-08-25
- Edition
- iom-2026-08-25
- Content hash
dfdf7b77f091d3e03d9b920ed837cdbf1d151a59d4b11b7940a3ac0b87e6b0ee
The link goes to the issuing authority’s own document — the one we read to produce this record. Where a source publishes whole titles rather than sections, your browser may need a moment to jump to the provision.
Unofficial copy of government-published law, reproduced from official sources with full provenance. Not an official publication; verify against official sources before relying on it in a filing. Records in the 'guidance' corpus, and only that corpus, are sub-regulatory (interpretive guidelines, survey procedures) and are not binding law. Validity bounds follow each jurisdiction's declared temporalBasis.