§ 480.145 Beneficiary authorization of use of confidential information.

(a) Except as otherwise provided under this part, a QIO may not use or disclose a beneficiary's confidential information without an authorization from the beneficiary. The QIO's use or disclosure must be consistent with the authorization.

(b) A valid authorization is a document that contains the following:

(1) A description of the information to be used or disclosed that identifies the information in a specific and meaningful fashion.

(2) The name or other specific identification of the QIO(s) and QIO point(s) of contact making the request to use or disclose the information.

(3) The name or other specific identification of the person(s), or class of persons, to whom the QIO(s) may disclose the information or allow the requested use.