The Certificate of Destruction will be
used by recipients of CMS data to certify that they have destroyed
the data they have received through a CMS Data Use Agreement (DUA).
The DUA requires the destruction of the data at the completion of
the project/expiration of the DUA. The DUA addresses the conditions
under which CMS will disclose and the User will maintain CMS data
that are protected by the Privacy Act of 1974, §552a and the Health
Insurance Portability Accountability Act of 1996. CMS has developed
policies and procedures for such disclosures that are based on the
Privacy Act and the Health Insurance Portability Act (HIPAA). The
Certificate of Destruction is required to close out the DUA and to
ensure the data are destroyed and not used for another
purpose.
On behalf of this Federal agency, I certify that
the collection of information encompassed by this request complies
with 5 CFR 1320.9 and the related provisions of 5 CFR
1320.8(b)(3).
The following is a summary of the topics, regarding
the proposed collection of information, that the certification
covers:
(i) Why the information is being collected;
(ii) Use of information;
(iii) Burden estimate;
(iv) Nature of response (voluntary, required for a
benefit, or mandatory);
(v) Nature and extent of confidentiality; and
(vi) Need to display currently valid OMB control
number;
If you are unable to certify compliance with any of
these provisions, identify the item by leaving the box unchecked
and explain the reason in the Supporting Statement.