The CMS is responsible for
administering the Medicare, Medicaid and State Children's Health
Insurance Programs. We collect data to support the Agency's mission
and operations. These data include information about Medicare
beneficiaries, Medicare claims, Medicare providers, and Medicaid
eligibility and claims. We disclose the identifiable data
consistent with the routine uses identified in the Privacy Act
Systems of Records notices that are published in the Federal
Register and the limitations on uses and disclosures that are set
out in the HIPAA Privacy Rule. All requests for identifiable data
are received and reviewed by the Division of Privacy Operations
& Compliance (DPOC) in the Office of E-Health Standards and
Services. The DPOC staff and the CMS Privacy Officer review the
requests to determine if there is legal authorization for
disclosure of the data. If legal authorization exists, the request
is reviewed to ensure that the minimal data necessary is requested
and approved for the project. Requests for identifiable data for
research purposes must be submitted to and approved by the CMS
Privacy Board. To assist the CMS Privacy Board with its review of
research data requests, OIPDA has developed the Executive Summary
(ES) forms. The ES collects all the information that the CMS
Privacy Board needs to review and make a determination on whether
the request meets the requirements for release of identifiable data
for research purposes. We currently have three versions of the ES
Form and an ES Supplement for Requestors of the National Death
Index (NDI) Causes of Death Variables. Each meets the need for a
different type of requestor.
On behalf of this Federal agency, I certify that
the collection of information encompassed by this request complies
with 5 CFR 1320.9 and the related provisions of 5 CFR
1320.8(b)(3).
The following is a summary of the topics, regarding
the proposed collection of information, that the certification
covers:
(i) Why the information is being collected;
(ii) Use of information;
(iii) Burden estimate;
(iv) Nature of response (voluntary, required for a
benefit, or mandatory);
(v) Nature and extent of confidentiality; and
(vi) Need to display currently valid OMB control
number;
If you are unable to certify compliance with any of
these provisions, identify the item by leaving the box unchecked
and explain the reason in the Supporting Statement.