The Certificate of Destruction will be used by recipients of CMS data to certify that they have destroyed the data they have received through a CMS Data Use Agreement (DUA). The DUA requires the destruction of the data at the completion of the project/expiration of the DUA. The DUA addresses the conditions under which CMS will disclose and the User will maintain CMS data that are protected by the Privacy Act of 1974, §552a and the Health Insurance Portability Accountability Act of 1996. CMS has developed policies and procedures for such disclosures that are based on the Privacy Act and the Health Insurance Portability Act (HIPAA). The Certificate of Destruction is required to close out the DUA and to ensure the data are destroyed and not used for another purpose.
On behalf of this Federal agency, I certify that the collection of information encompassed by this request complies with 5 CFR 1320.9 and the related provisions of 5 CFR 1320.8(b)(3).
The following is a summary of the topics, regarding the proposed collection of information, that the certification covers:
(i) Why the information is being collected;
(ii) Use of information;
(iii) Burden estimate;
(iv) Nature of response (voluntary, required for a benefit, or mandatory);
(v) Nature and extent of confidentiality; and
(vi) Need to display currently valid OMB control number;
If you are unable to certify compliance with any of these provisions, identify the item by leaving the box unchecked and explain the reason in the Supporting Statement.