Confidentiality Disclosure

Citation

42 CFR § 480.101

Scope and definitions.

This provision defines key terms and the scope of regulations governing the acquisition, protection, and disclosure of information by Quality Improvement Organizations.

Citation

42 CFR § 480.103

Statutory bases for disclosure of information.

This provision specifies the statutory requirements for QIOs to exchange information with other entities and mandates the confidentiality of QIO information, with specific exceptions for fraud, public health, and licensing.

Citation

42 CFR § 480.104

Procedures for disclosure by a QIO.

This provision outlines the procedural requirements for QIOs when disclosing information, including notice requirements, fees, and formatting standards.

Citation

42 CFR § 480.105

Notice of disclosures made by a QIO.

This provision requires Quality Improvement Organizations to notify institutions at least 30 days before disclosing nonconfidential information and outlines notification requirements for confidential information.

Citation

42 CFR § 480.106

Exceptions to QIO notice requirements.

This provision defines specific circumstances, such as imminent danger or fraud investigations, where the standard QIO notification requirements for information disclosure do not apply.

Citation

42 CFR § 480.107

Limitations on redisclosure.

This provision restricts the further disclosure of confidential QIO information by persons or organizations that have obtained it, with specific exceptions for legal and administrative purposes.

Citation

42 CFR § 480.108

Penalties for unauthorized disclosure.

This provision establishes criminal penalties, including fines and imprisonment, for the unauthorized disclosure of QIO information.

Citation

42 CFR § 480.109

Applicability of other statutes and regulations.

This provision clarifies that federal regulations governing the confidentiality of alcohol and drug abuse patient records apply to QIO information.

Citation

42 CFR § 480.115

Requirements for maintaining confidentiality.

This provision outlines the responsibilities of QIOs to maintain the confidentiality of information, including physical security, training, and data purging requirements.

Citation

42 CFR § 480.116

Notice to individuals and institutions under review.

The QIO must establish procedures to inform patients, practitioners, and institutions about the maintenance and disclosure of QIO information.