How are patient data protected when they are reported to CDC?
CDC is authorized under Title III, Section 301, Section 304, and Section 306 of the Public Health Service Act (42 USC 241, 242b, 242k, and 242m(d)) to collect data on healthcare-associated infections (HAIs). This assurance provides strict confidentiality for data that could identify an individual or institution. The data are collected for the purposes of quality improvement and program management only. Facilities can voluntarily release their own data to anyone they choose or grant access to a group (e.g., a state or accrediting entity for consumer choice purposes) to view and analyze the facility’s data. Even though a facility may choose to share data with a group, CDC is prohibited from sharing data with others. For more information visit: http://www.cdc.gov/ncidod/dhqp/nnis.
