How does the Privacy Act affect my access to Medicare data?
CMS(previously HCFA) data release policies seek to ensure that files containing physician and/or beneficiary identifiers are used only when necessary and in accordance with disclosure provisions of the Privacy Act. Researchers need to submit a written request, study plan or protocols, evidence of funding, and Data User Agreements (DUA) to CMS for review. CMS will then approve or reject the data file release.
