e-CFR banner


e-CFR Navigation Aids


Simple Search

Advanced Search

 — Boolean

 — Proximity


Search History

Search Tips


Latest Updates

User Info


Agency List

Incorporation By Reference

eCFR logo

Related Resources


Electronic Code of Federal Regulations

e-CFR data is current as of February 20, 2020

Title 42Chapter IVSubchapter BPart 422Subpart C → §422.118

Title 42: Public Health
Subpart C—Benefits and Beneficiary Protections

§422.118   Confidentiality and accuracy of enrollee records.

For any medical records or other health and enrollment information it maintains with respect to enrollees, an MA organization must establish procedures to do the following:

(a) Abide by all Federal and State laws regarding confidentiality and disclosure of medical records, or other health and enrollment information. The MA organization must safeguard the privacy of any information that identifies a particular enrollee and have procedures that specify—

(1) For what purposes the information will be used within the organization; and

(2) To whom and for what purposes it will disclose the information outside the organization.

(b) Ensure that medical information is released only in accordance with applicable Federal or State law, or pursuant to court orders or subpoenas.

(c) Maintain the records and information in an accurate and timely manner.

(d) Ensure timely access by enrollees to the records and information that pertain to them.

[65 FR 40323, June 29, 2000]

Need assistance?