US · guidance
CMS Pub. 100-16, ch. mc86c17f, § 110
Confidentiality and Records
(Rev. 77, Issued: 10-28-05, Effective Date: 10-28-05)
General Rule
For any medical records or other health and enrollment information it maintains with
respect to enrollees, a Medicare cost plan must establish procedures to do the following:
• Abide by all Federal and state laws regarding confidentiality and disclosure of
medical records, or other health and enrollment information. The Medicare cost
plan must safeguard the privacy of any information that identifies a particular
enrollee and have procedures that specify:
o For what purposes the information will be used within the organization
and
o To whom and for what purposes it will disclose the information outside
the organization;
• Ensure that medical information is released only in accordance with applicable
Federal or state law, or pursuant to court orders or subpoenas;
• Maintain the records and information in an accurate and timely manner; and
• Ensure timely access by enrollees to the records and information that pertains to
them.
History
(Rev. 77, Issued: 10-28-05, Effective Date: 10-28-05)
Provenance
- Source
- cms.gov
- Retrieved
- 2026-08-25
- Edition
- iom-2026-08-25
- Content hash
88ba9f041ba802a159ad59716ab3b96ce5c5c8b39b464bfd4570b069457e8db6
The link goes to the issuing authority’s own document — the one we read to produce this record. Where a source publishes whole titles rather than sections, your browser may need a moment to jump to the provision.
Unofficial copy of government-published law, reproduced from official sources with full provenance. Not an official publication; verify against official sources before relying on it in a filing. Records in the 'guidance' corpus, and only that corpus, are sub-regulatory (interpretive guidelines, survey procedures) and are not binding law. Validity bounds follow each jurisdiction's declared temporalBasis.