CMS Data Use Agreements and Data Management PlansFebruary 5th, 2018
FiledFebruary 5th, 2018This policy applies to all personnel, regardless of affiliation, who intend to use identifiable data from the Centers for Medicare and Medicaid Services (CMS) for research purposes under the auspices of Indiana University. The recipient must comply with the final provisions of the security and privacy rules regulated by the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act. CMS requires compliance with these rules regardless of whether the recipient is part of a covered entity.