Medicare Program Integrity Manual (Pub. 100-08), Ch. 1 § 1.6
Maintaining the Confidentiality of MR Medical Records and
1.6 – Maintaining the Confidentiality of MR Medical Records and
Documents
(Rev. 508; Issued: 03-07-14, Effective: 04-08-14, Implementation: 04-08-14)
A. Contractors to Which This Section Applies
This section applies to MACs, CERT, Recovery Auditors, and SMRC.
B. General
Contractors shall maintain the confidentiality of all MR medical records and documents
before, during, and after the MR process. Similarly, contractors that use a
subcontractor(s) to perform MR, to store MR documents, and/or to transport MR
documents, are responsible for ensuring that the subcontractor(s) maintains the
confidentiality of the MR documents that it handles. This responsibility applies to all
contact with these documents by all parties and entities, however derived from the
contractor. The responsibility is not limited or ended if the subcontractor allows an
additional party or entity to have contact with these documents. Thus, just as the
contractor shall assure that the subcontractor maintain confidentiality itself, so too shall
the contractor assure that the subcontractor similarly assures that any third party or other
entity, such as a sub to the subcontractor, which has contact with the documents, maintain
confidentiality.