§ 423.136 Privacy, confidentiality, and accuracy of enrollee records.

For any medical records or other health and enrollment information it maintains with respect to enrollees, a PDP sponsor must establish procedures to do the following—

(a) Abide by all Federal and State laws regarding confidentiality and disclosure of medical records, or other health and enrollment information. The PDP sponsor must safeguard the privacy of any information that identifies a particular enrollee and have procedures that specify—