How does the Privacy Act affect my access to and use of Medicare data?
CMS data release policies seek to ensure that files containing physician and/or beneficiary identifiers are used only when necessary and in accordance with disclosure provisions of the Privacy Act. Researchers need to submit a data request packet to ResDAC and CMS for review. CMS will then approve or reject the data file release. The release of Limited Data Set Files (LDS) is also subject to a DUA despite the fact that physician and/or beneficiary identifiers are blanked out or encrypted. Any result that may lead to identification of an individual beneficiary (e.g. cell sizes less than 11) must be suppressed.
