Quality Improvement Organization Manual (Pub. 100-10), Ch. 5 § 5055.8
Beneficiary Complaint: Responsibility to Protect Information and
5055.8 – Beneficiary Complaint: Responsibility to Protect Information and
Destruction of Materials
(Rev. 28, Issued: 10-21-16, Effective: 10-21-16, Implementation: 10-21-16)
As specified at 42 CFR 480.115, the QIO is responsible for protecting information and must
implement reasonable security measures to ensure the integrity of information and prevent
unauthorized access. See Manual Chapter 10 for additional information.
No later than thirty (30) calendar days after the Initial Determination Peer Reviewer renders
his/her final decision, all hard copies of materials that pertain to the specific beneficiary
complaint in his/her possession must be destroyed in compliance with QIO security procedures.
The QIO will maintain the original documentation at its facility.