Medicare Program: Expanding Uses of Medicare Data by Qualified Entities

This final rule implements requirements under Section 105 of the Medicare Access and CHIP Reauthorization Act of 2015 that expand how qualified entities may use and disclose data under the qualified entity program to the extent consistent with applicable program requirements and other applicable laws, including information, privacy, security and disclosure laws. This rule also explains how qualified entities may create non-public analyses and provide or sell such analyses to authorized users, as well as how qualified entities may provide or sell combined data, or provide Medicare claims data alone at no cost, to certain authorized users. In addition, this rule implements certain privacy and security requirements, and imposes assessments on qualified entities if the qualified entity or the authorized user violates the terms of a data use agreement required by the qualified entity program.