Вы находитесь на странице: 1из 7

Federal Register / Vol. 71, No.

179 / Friday, September 15, 2006 / Notices 54489

DEPARTMENT OF HEALTH AND proposed information collections must We propose to modify existing routine
HUMAN SERVICES be received at the address below, no use number 1 that permits disclosure to
later than 5 p.m. on November 14, 2006. agency contractors and consultants to
Centers for Medicare & Medicaid CMS, Office of Strategic Operations and include disclosure to CMS grantees who
Services Regulatory Affairs, Division of perform a task for the agency. CMS
[Document Identifier: CMS–2786] Regulations Development—A, grantees, charged with completing
Attention: Melissa Musotto, Room projects or activities that requires CMS
Agency Information Collection C4–26–05, 7500 Security Boulevard, data to carry out that activity, are
Activities: Proposed Collection; Baltimore, Maryland 21244–1850. classified separate from CMS
Comment Request contractors and/or consultants. The
Dated: September 8, 2006. modified routine use will remain as
AGENCY: Centers for Medicare & Michelle Shortt, routine use number 1.
Medicaid Services, HHS. Director, Regulations Development Group, We propose to broaden the scope of
In compliance with the requirement Office of Strategic Operations and Regulatory routine uses number 5 and 6,
of section 3506(c)(2)(A) of the Affairs. authorizing disclosures to combat fraud
Paperwork Reduction Act of 1995, the [FR Doc. E6–15308 Filed 9–14–06; 8:45 am] and abuse in the Medicare and
Centers for Medicare & Medicaid BILLING CODE 4120–01–P Medicaid programs to include
Services (CMS) is publishing the combating ‘‘waste’’ which refers to
following summary of proposed specific beneficiary/recipient practices
collections for public comment. DEPARTMENT OF HEALTH AND that result in unnecessary cost to all
Interested persons are invited to send HUMAN SERVICES federally funded health benefit
comments regarding this burden programs.
estimate or any other aspect of this Centers for Medicare & Medicaid We will delete routine use number 4,
collection of information, including any Services authorizing disclosure to support
of the following subjects: (1) The constituent requests made to a
necessity and utility of the proposed Privacy Act of 1974; Report of a Congressional representative. If an
information collection for the proper Modified or Altered System of Records authorization for the disclosure has
performance of the agency’s functions; been obtained from the data subject,
AGENCY: Department of Health and
(2) the accuracy of the estimated then no routine use is needed. The
Human Services (HHS), Centers for
burden; (3) ways to enhance the quality, Privacy Act allows for disclosures with
Medicare & Medicaid Services (CMS).
utility, and clarity of the information to the ‘‘prior written consent’’ of the data
be collected; and (4) the use of ACTION: Notice of a Modified or Altered subject.
automated collection techniques or System of Records (SOR). We are modifying the language in the
other forms of information technology to remaining routine uses to provide a
minimize the information collection SUMMARY: In accordance with the proper explanation as to the need for the
burden. Privacy Act of 1974, we are proposing routine use and to provide clarity to
1. Type of Information Collection to modify or alter an existing SOR, CMS’s intention to disclose individual-
Request: Extension of a currently ‘‘Medicare Appeals System (MAS),’’ specific information contained in this
approved collection; Title of System No. 09–70–5001, last published system. We will also take the
Information Collection: Fire Safety at 69 Federal Register (FR) 75323 opportunity to update any sections of
Survey Report Forms and Supporting (December 16, 2004). CMS is the system that were affected by the
Regulations in 42 CFR 416.44, 418.100, reorganizing its databases because of the recent reorganization or MMA
482.41, 483.70, and 483.470; Use: These impact of the Medicare Prescription provisions and to update language in
forms are used by the State Agencies to Drug, Improvement, and Modernization the administrative sections to
record data collected to determine Act of 2003 (MMA) (Public Law (Pub.L.) correspond with language used in other
compliance with individual conditions 108–173) provisions and the large CMS SORs.
during fire safety surveys and report it volume of information the Agency The primary purpose of this modified
to the Federal Government. Form collects to administer the Medicare system is to collect and maintain
Number: CMS–2786 M, R, S, T, U, V, W, program. We propose to assign a new information necessary to: (1) Process
X, Y (OMB#: 0938–0242; Frequency: CMS identification number to this level two and level three appeal
Reporting—Annually; Affected Public: system to simplify the obsolete and requests made by an appellant or
State, Local or Tribal Government; confusing numbering system originally appealing party; (2) track appeal data,
Number of Respondents: 27,900; Total designed to identify the Bureau, Office, including: status, type, history,
Annual Responses: 27,900; Total or Center that maintained the system of timeliness, and decisions; and (3)
Annual Hours: 2,325. records. The new assigned identifying respond to future correspondence
To obtain copies of the supporting number for this system should read: related to the case. The information
statement and any related forms for the System No. 09–70–0566. retrieved from this system of records
proposed paperwork collections We propose to broaden the scope of will also be disclosed to: (1) Support
referenced above, access CMS’ Web site this system with the inclusion of regulatory and policy functions
address at http://www.cms.hhs.gov/ support for two additional appeals performed within the agency or by a
PaperworkReductionActof1995, or e- processes: documenting policies and contractor, consultant, or grantee; (2)
mail your request, including your procedures relating to National another Federal agency; (3) assist
address, phone number, OMB number, Coverage Determinations and Quality Improvement Organizations; (4)
and CMS document identifier, to Prescription Drug Coverage appeals. support litigation involving the agency;
jlentini on PROD1PC65 with NOTICES

Paperwork@cms.hhs.gov, or call the These new processes are added to the and (5) combat fraud, waste, and abuse.
Reports Clearance Office on (410) 786– current appeals process that include We have provided background
1326. appeals of Medicare claims decisions, information about the modified system
To be assured consideration, Administrative Law Judge hearings, and in the SUPPLEMENTARY INFORMATION
comments and recommendations for the Medicare Advantage service decisions. section below. Although the Privacy Act

VerDate Aug<31>2005 14:51 Sep 14, 2006 Jkt 208001 PO 00000 Frm 00037 Fmt 4703 Sfmt 4703 E:\FR\FM\15SEN1.SGM 15SEN1
54490 Federal Register / Vol. 71, No. 179 / Friday, September 15, 2006 / Notices

requires only that CMS provide an I. Description of the Modified or maintained in the system. Disclosure of
opportunity for interested persons to Altered System of Records information from this system will be
comment on the modified or altered approved only to the extent necessary to
A. Statutory and Regulatory Basis for
routine uses, CMS invites comments on accomplish the purpose of the
SOR
all portions of this notice. See ‘‘Effective disclosure and only after CMS:
Dates’’ section for comment period. Authority for maintenance of the 1. Determines that the use or
DATES: Effective Date: CMS filed a system is given under § 205 of Title II, disclosure is consistent with the reason
modified or altered SOR report with the §§ 1155 and 1156 of Title XI, §§ 1812, that the data is being collected, e.g., to
Chair of the House Committee on 1814, 1816, 1842, 1869, and 1872 of collect and maintain information
Government Reform and Oversight, the Title XVIII of the Social Security Act necessary to: (1) Process level two and
Chair of the Senate Committee on (the Act), as amended (42 United States level three appeal requests made by an
Homeland Security & Governmental Code (U.S.C.) sections 405, 1320c–4, appellant or appealing party; (2) track
Affairs, and the Administrator, Office of 1320c–5, 1395d, 1395f, 1395h, 1395u, appeal data, including: status, type,
Information and Regulatory Affairs, 1395ff, and 1395ii). Additional history, timeliness, and decisions; and
Office of Management and Budget authority for this system is given under (3) respond to future correspondence
(OMB) on September 6, 2006. To ensure the Medicare Prescription Drug, related to the case.
that all parties have adequate time in Improvement, and Modernization Act of 2. Determines that:
which to comment, the new system will 2003 (Public Law (Pub. L.) 108–173). a. The purpose for which the
become effective 30 days from the disclosure is to be made can only be
B. Collection and Maintenance of Data
publication of the notice, or 40 days accomplished if the record is provided
in the System
from the date it was submitted to OMB in individually identifiable form;
and the Congress, whichever is later. We MAS contains information concerning b. The purpose for which the
may defer implementation of this Medicare beneficiaries, physicians, disclosure is to be made is of sufficient
system or one or more of the routine use providers, practitioners, suppliers and importance to warrant the effect and/or
statements listed below if we receive other persons involved in furnishing risk on the privacy of the individual that
comments that persuade us to defer items and services to health insurance additional exposure of the record might
implementation. beneficiaries. Information on bring; and
beneficiaries includes, but is not limited c. There is a strong probability that
ADDRESSES: The public should address to: name, address, social security the proposed use of the data would in
comments to the CMS Privacy Officer, number, health insurance claim fact accomplish the stated purpose(s).
Division of Privacy Compliance, number, medical services, equipment 3. Requires the information recipient
Enterprise Architecture and Strategy and supplies for which Medicare to:
Group, CMS, Mail Stop N2–04–27, 7500 reimbursement is requested, and a. Establish administrative, technical,
Security Boulevard, Baltimore, materials used to determine the amount and physical safeguards to prevent
Maryland 21244–1850. Comments of benefits allowable under Medicare. unauthorized use of disclosure of the
received will be available for review at Information on appellants, physicians, record;
this location, by appointment, during and other persons include, but is not b. Remove or destroy at the earliest
regular business hours, Monday through limited to: name, work address, work time all patient-identifiable information;
Friday from 9 a.m.–3 p.m., eastern phone number, and assigned provider and
daylight time. identification number, specialty, c. Agree to not use or disclose the
FOR FURTHER INFORMATION CONTACT: medical services for which Medicare information for any purpose other than
Aaron Pleines, Division of Appeals reimbursement is requested, and the stated purpose under which the
Operations, Medicare Enrollment and materials used to determine amounts of information was disclosed.
Appeals Group, Center for Beneficiary benefits allowable under Medicare. 4. Determines that the data are valid
Choices, CMS, Mail Stop S1–05–06, and reliable.
II. Agency Policies, Procedures, and
7500 Security Boulevard, Baltimore,
Restrictions on the Routine Use III. Proposed Routine Use Disclosures
Maryland 21244–1850. He can also be
of Data in the System
reached by telephone at 410–786–2137, A. Agency Policies, Procedures, and
or via e-mail at Restrictions on the Routine Use A. The Privacy Act allows us to disclose
Aaron.Pleines@cms.hhs.gov. The Privacy Act permits us to disclose information without an individual’s
SUPPLEMENTARY INFORMATION: In 1987, information without an individual’s consent if the information is to be used
CMS established this SOR under the consent if the information is to be used for a purpose that is compatible with the
authority of sections 205, 1155, 1156, for a purpose that is compatible with the purpose(s) for which the information
1869, and 1872 of the Social Security purpose(s) for which the information was collected.
Act. Notice of this system, ‘‘Medicare was collected. Any such disclosure of Any such compatible use of data is
Hearings and Appeals System (MHAS) data is known as a ‘‘routine use.’’ The known as a ‘‘routine use.’’ The proposed
System No. 09–70–5001,’’ was government will only release MAS routine uses in this system meet the
published at 52 FR 34846 (September information that can be associated with compatibility requirement of the Privacy
15, 1987), an unnumbered routine use an individual as provided for under Act. We are proposing to establish the
for disclosure to the Social Security ‘‘Section III. Proposed Routine Use following routine use disclosures of
Administration (SSA) was added at 61 Disclosures of Data in the System.’’ Both information maintained in the system:
FR 6645 (February 21, 1996), an identifiable and non-identifiable data 1. To support agency contractor,
unnumbered routine use for SSA was may be disclosed under a routine use. consultant, or grantee who have been
jlentini on PROD1PC65 with NOTICES

deleted, a routine use for Quality We will only collect the minimum engaged by the agency to assist in the
Improvement Organizations and two personal data necessary to achieve the accomplishment of a CMS function
routine uses for combating fraud and purpose of MAS. CMS has the following relating to the purposes for this system
abuse were added at 69 FR 75323 policies and procedures concerning and who need to have access to the
(December 16, 2004). disclosures of information that will be records in order to assist CMS.

VerDate Aug<31>2005 14:51 Sep 14, 2006 Jkt 208001 PO 00000 Frm 00038 Fmt 4703 Sfmt 4703 E:\FR\FM\15SEN1.SGM 15SEN1
Federal Register / Vol. 71, No. 179 / Friday, September 15, 2006 / Notices 54491

We contemplate disclosing this a. The agency or any component abuse in, a health benefits program
information under this routine use only thereof, or funded in whole or in part by Federal
in situations in which CMS may enter b. Any employee of the agency in his funds, when disclosure is deemed
into a contractual or similar agreement or her official capacity, or reasonably necessary by CMS to
with a third party to assist in c. Any employee of the agency in his prevent, deter, discover, detect,
accomplishing a CMS function relating or her individual capacity where the investigate, examine, prosecute, sue
to purposes for this system. DOJ has agreed to represent the with respect to, defend against, correct,
CMS occasionally contracts out employee, or remedy, or otherwise combat fraud,
certain of its functions when doing so d. The United States Government is a waste, or abuse in such programs.
would contribute to effective and party to litigation or has an interest in Other agencies may require MAS
efficient operations. CMS must be able such litigation, and by careful review, information for the purpose of
to give a contractor, consultant or CMS determines that the records are combating fraud, waste, and abuse in
grantee whatever information is both relevant and necessary to the such Federally-funded programs.
necessary for the contractor, consultant litigation and that the use of such
records by the DOJ, court or B. Additional Provisions Affecting
or grantee to fulfill its duties. In these
adjudicatory body is compatible with Routine Use Disclosures
situations, safeguards are provided in
the contract prohibiting the contractor, the purpose for which the agency To the extent this system contains
consultant or grantee from using or collected the records. Protected Health Information (PHI) as
disclosing the information for any Whenever CMS is involved in defined by HHS regulation ‘‘Standards
purpose other than that described in the litigation, and occasionally when for Privacy of Individually Identifiable
contract and requires the contractor, another party is involved in litigation Health Information’’ (45 CFR parts 160
consultant or grantee to return or and CMS’s policies or operations could and 164, subparts A and E) 65 FR 82462
destroy all information at the be affected by the outcome of the (12–28–00). Disclosures of such PHI that
completion of the contract. litigation, CMS would be able to are otherwise authorized by these
2. To assist another Federal agency in disclose information to the DOJ, court or routine uses may only be made if, and
the accomplishment of a CMS function adjudicatory body involved. as, permitted or required by the
relating to the purposes for this system 5. To a CMS contractor (including, but ‘‘Standards for Privacy of Individually
and who need to have access to the not necessarily limited to, fiscal Identifiable Health Information.’’ (See
records in order to support CMS. intermediaries and carriers) that assists 45 CFR 164.512(a)(1)).
DOJ may require MAS data to assist in the administration of a CMS- In addition, our policy will be to
them in investigating and prosecuting administered health benefits program, prohibit release even of data not directly
violations of the Act to which criminal or to a grantee of a CMS-administered identifiable, except pursuant to one of
penalties attach, or other criminal grant program, when disclosure is the routine uses or if required by law,
statutes as they pertain to certain deemed reasonably necessary by CMS to if we determine there is a possibility
programs authorized by the Act, and for prevent, deter, discover, detect, that an individual can be identified
representing the Secretary of the investigate, examine, prosecute, sue through implicit deduction based on
Department of Health and Human with respect to, defend against, correct, small cell sizes (instances where the
Services. remedy, or otherwise combat fraud, patient population is so small that an
We contemplate disclosing waste, or abuse in such program. individual could, because of the small
information under this routine use only We contemplate disclosing size of the information provided, use
in situations in which CMS may enter information under this routine use only this information to deduce the identity
into a contractual or similar agreement in situations in which CMS may enter of the beneficiary).
with another Federal agency to assist in into a contractual, grantee, cooperative
agreement or consultant relationship IV. Safeguards
accomplishing CMS functions relating
to purposes for this system. with a third party to assist in CMS has safeguards in place for
3. To assist Quality Improvement accomplishing CMS functions relating authorized users and monitors such
Organizations (QIO) in connection with to the purpose of combating fraud, users to ensure against excessive or
the review of claims, or in connection waste, and abuse. CMS occasionally unauthorized use. Personnel having
with studies or other review activities, contracts out certain of its functions or access to the system have been trained
conducted pursuant to Part B of Title XI makes grants or cooperative agreements in the Privacy Act and information
of the Act and in performing affirmative when doing so would contribute to security requirements. Employees who
outreach activities to individuals for the effective and efficient operations. CMS maintain records in this system are
purpose of establishing and maintaining must be able to give a contractor, instructed not to release data until the
their entitlement to Medicare benefits or grantee, consultant or other legal agent intended recipient agrees to implement
health insurance plans. whatever information is necessary for appropriate management, operational
QIOs will work to implement quality the agent to fulfill its duties. In these and technical safeguards sufficient to
improvement programs, provide situations, safeguards are provided in protect the confidentiality, integrity and
consultation to CMS, its contractors, the contract prohibiting the agent from availability of the information and
and to ensure that payment is only using or disclosing the information for information systems and to prevent
made for medically necessary services. any purpose other than that described in unauthorized access.
QIOs will assist in related monitoring the contract and requiring the agent to This system will conform to all
and enforcement efforts, assist CMS and return or destroy all information. applicable Federal laws and regulations
intermediaries in program integrity 6. To another Federal agency or to an and Federal, HHS, and CMS policies
assessment, investigate beneficiary instrumentality of any governmental and standards as they relate to
jlentini on PROD1PC65 with NOTICES

complaints about quality of care, and jurisdiction within or under the control information security and data privacy.
prepare summary information for of the United States (including any State These laws and regulations may apply
release to CMS. or local governmental agency), that but are not limited to: The Privacy Act
4. To the Department of Justice (DOJ), administers, or that has the authority to of 1974; the Federal Information
court or adjudicatory body when: investigate potential fraud, waste, or Security Management Act of 2002; the

VerDate Aug<31>2005 14:51 Sep 14, 2006 Jkt 208001 PO 00000 Frm 00039 Fmt 4703 Sfmt 4703 E:\FR\FM\15SEN1.SGM 15SEN1
54492 Federal Register / Vol. 71, No. 179 / Friday, September 15, 2006 / Notices

Computer Fraud and Abuse Act of 1986; 1850. This system is also located in ROUTINE USES OF RECORDS MAINTAINED IN THE
the Health Insurance Portability and locations listed in Appendix A. SYSTEM, INCLUDING CATEGORIES OF USERS AND
Accountability Act of 1996; the E- THE PURPOSES OF SUCH USES:
Government Act of 2002, the Clinger- CATEGORIES OF INDIVIDUALS COVERED BY THE A. The Privacy Act Allows Us To
Cohen Act of 1996; the Medicare SYSTEM: Disclose Information Without an
Modernization Act of 2003, and the MAS contains information concerning Individual’s Consent if the Information
corresponding implementing Medicare beneficiaries, physicians, Is To Be Used for a Purpose That Is
regulations. OMB Circular A–130, providers, practitioners, suppliers and Compatible With the Purpose(s) for
Management of Federal Resources, other persons involved in furnishing Which the Information Was Collected.
Appendix III, Security of Federal Any such compatible use of data is
items and services to health insurance
Automated Information Resources, also known as a ‘‘routine use.’’ The proposed
beneficiaries.
applies. routine uses in this system meet the
Federal, HHS, and CMS policies and CATEGORIES OF RECORDS IN THE SYSTEM:
compatibility requirement of the Privacy
standards include but are not limited to: Act. We are proposing to establish the
All pertinent National Institute of Information on beneficiaries includes, following routine use disclosures of
Standards and Technology publications; but is not limited to: Name, address, information maintained in the system:
the HHS Information Systems Program social security number (SSN), health 1. To support agency contractor,
Handbook and the CMS Information insurance claim number (HICN), consultant, or grantee who have been
Security Handbook. medical services, equipment and engaged by the agency to assist in the
supplies for which Medicare accomplishment of a CMS function
V. Effects of the Modified or Altered reimbursement is requested, and relating to the purposes for this system
System of Records on Individual Rights materials used to determine the amount and who need to have access to the
CMS proposes to modify this system of benefits allowable under Medicare. records in order to assist CMS.
in accordance with the principles and Information on appellants, physicians, 2. To assist another Federal agency in
requirements of the Privacy Act and will and other persons includes, but is not the accomplishment of a CMS function
collect, use, and disseminate limited to: name, work address, work relating to the purposes for this system
information only as prescribed therein. phone number, and assigned provider and who need to have access to the
Data in this system will be subject to the identification number, specialty, records in order to support CMS.
authorized releases in accordance with medical services for which Medicare 3. To assist Quality Improvement
the routine uses identified in this reimbursement is requested, and Organizations (QIO) in connection with
system of records. materials used to determine amounts of the review of claims, or in connection
CMS will take precautionary benefits allowable under Medicare. with studies or other review activities,
measures to minimize the risks of conducted pursuant to Part B of Title XI
AUTHORITY FOR MAINTENANCE OF THE SYSTEM: of the Act and in performing affirmative
unauthorized access to the records and
the potential harm to individual privacy Authority for maintenance of the outreach activities to individuals for the
or other personal or property rights of system is given under § 205 of Title II, purpose of establishing and maintaining
patients whose data are maintained in §§ 1155 and 1156 of Title XI, §§ 1812, their entitlement to Medicare benefits or
the system. CMS will collect only that 1814, 1816, 1842, 1869, and 1872 of health insurance plans.
information necessary to perform the Title XVIII of the Social Security Act 4. To the Department of Justice (DOJ),
system’s functions. In addition, CMS (the Act), as amended (42 United States court or adjudicatory body when:
will make disclosure from the proposed Code (U.S.C.) sections 405, 1320c–4, a. The agency or any component
system only with consent of the subject 1320c–5, 1395d, 1395f, 1395h, 1395u, thereof, or
b. Any employee of the agency in his
individual, or his/her legal 1395ff, and 1395ii). Additional
or her official capacity, or
representative, or in accordance with an authority for this system is given under c. Any employee of the agency in his
applicable exception provision of the the Medicare Prescription Drug, or her individual capacity where the
Privacy Act. CMS, therefore, does not Improvement, and Modernization Act of DOJ has agreed to represent the
anticipate an unfavorable effect on 2003 (Public Law (Pub. L.) 108–173). employee, or
individual privacy as a result of d. The United States Government is a
information relating to individuals. PURPOSE(S) OF THE SYSTEM:
party to litigation or has an interest in
Dated: September 1, 2006. The primary purpose of this modified such litigation, and by careful review,
Charlene Frizzera, system is to collect and maintain CMS determines that the records are
Acting Chief Operating Officer, Centers for information necessary to: (1) Process both relevant and necessary to the
Medicare & Medicaid Services. level two and level three appeal litigation and that the use of such
requests made by an appellant or records by the DOJ, court or
System No.: 09–70–0566 appealing party; (2) track appeal data, adjudicatory body is compatible with
SYSTEM NAME: including: status, type, history, the purpose for which the agency
‘‘Medicare Appeals System (MAS),’’ timeliness, and decisions; and (3) collected the records.
HHS/CMS/CBC. respond to future correspondence 5. To a CMS contractor (including, but
related to the case. The information not necessarily limited to, fiscal
SECURITY CLASSIFICATION: retrieved from this system of records intermediaries and carriers) that assists
Level Three Privacy Act Sensitive will also be disclosed to: (1) Support in the administration of a CMS-
Data. regulatory and policy functions administered health benefits program,
performed within the agency or by a or to a grantee of a CMS-administered
jlentini on PROD1PC65 with NOTICES

SYSTEM LOCATION: contractor, consultant, or grantee; (2) grant program, when disclosure is
The Centers for Medicare & Medicaid another Federal agency; (3) assist deemed reasonably necessary by CMS to
Services (CMS) Data Center, 7500 Quality Improvement Organizations; (4) prevent, deter, discover, detect,
Security Boulevard, North Building, support litigation involving the agency; investigate, examine, prosecute, sue
First Floor, Baltimore, Maryland 21244– and (5) combat fraud, waste, and abuse. with respect to, defend against, correct,

VerDate Aug<31>2005 14:51 Sep 14, 2006 Jkt 208001 PO 00000 Frm 00040 Fmt 4703 Sfmt 4703 E:\FR\FM\15SEN1.SGM 15SEN1
Federal Register / Vol. 71, No. 179 / Friday, September 15, 2006 / Notices 54493

remedy, or otherwise combat fraud, intended recipient agrees to implement also specify the record contents being
waste, or abuse in such program. appropriate management, operational sought. (These procedures are in
6. To another Federal agency or to an and technical safeguards sufficient to accordance with department regulation
instrumentality of any governmental protect the confidentiality, integrity and 45 CFR 5b.5(a)(2)).
jurisdiction within or under the control availability of the information and
CONTESTING RECORDS PROCEDURES:
of the United States (including any State information systems and to prevent
or local governmental agency), that unauthorized access. The subject individual should contact
administers, or that has the authority to This system will conform to all the system manager named above, and
investigate potential fraud, waste, or applicable Federal laws and regulations reasonably identify the records and
abuse in, a health benefits program and Federal, HHS, and CMS policies specify the information to be contested.
funded in whole or in part by Federal and standards as they relate to In addition the individual should state
funds, when disclosure is deemed information security and data privacy. the corrective action sought and the
reasonably necessary by CMS to These laws and regulations may apply reasons for the correction with
prevent, deter, discover, detect, but are not limited to: The Privacy Act supporting justification. (These
investigate, examine, prosecute, sue of 1974; the Federal Information Procedures are in accordance with
with respect to, defend against, correct, Security Management Act of 2002; the Department regulation 45 CFR 5b.7).
remedy, or otherwise combat fraud, Computer Fraud and Abuse Act of 1986; RECORDS SOURCE CATEGORIES:
waste, or abuse in such programs. the Health Insurance Portability and Sources on information contained in
B. Additional Provisions Affecting Accountability Act of 1996; the E- this records system include data
Routine Use Disclosures. Government Act of 2002, the Clinger- collected from the individual on the
To the extent this system contains Cohen Act of 1996; the Medicare completed form requesting a Medicare
Protected Health Information (PHI) as Modernization Act of 2003, and the hearing or appeal. In addition,
defined by HHS regulation ‘‘Standards corresponding implementing information contained in this system
for Privacy of Individually Identifiable regulations. OMB Circular A–130, may be obtained from Medicare carriers
Health Information’’ (45 CFR parts 160 Management of Federal Resources, or intermediaries and Quality
and 164, subparts A and E) 65 FR 82462 Appendix III, Security of Federal Improvement Organizations’ records.
(12–28–00). Disclosures of such PHI that Automated Information Resources also
are otherwise authorized by these applies. Federal, HHS, and CMS SYSTEMS EXEMPTED FROM CERTAIN PROVISIONS
routine uses may only be made if, and policies and standards include but are OF THE ACT:
as, permitted or required by the not limited to: all pertinent National None.
‘‘Standards for Privacy of Individually Institute of Standards and Technology Appendix A. Health Insurance Claims
Identifiable Health Information.’’ (See publications; the HHS Information Medicare records are maintained at the
45 CFR 164.512(a)(1)). Systems Program Handbook and the CMS Central Office (see section 1 below for
In addition, our policy will be to CMS Information Security Handbook. the address). Health Insurance Records of the
prohibit release even of data not directly Medicare program can also be accessed
identifiable, except pursuant to one of RETENTION AND DISPOSAL:
through a representative of the CMS Regional
the routine uses or if required by law, Records are maintained in a secure Office (see section 2 below for addresses).
if we determine there is a possibility storage area with identifiers. Disposal Medicare claims records are also maintained
that an individual can be identified occurs ten years after the final by private insurance organizations that share
through implicit deduction based on determination of the case is completed. in administering provisions of the health
small cell sizes (instances where the All claims-related records are insurance programs. These private insurance
encompassed by the document organizations, referred to as carriers and
patient population is so small that an
intermediaries, are under contract to the
individual could, because of the small preservation order and will be retained Centers for Medicare & Medicaid Services to
size of the information provided, use until notification is received from DOJ. perform specific task in the Medicare
this information to deduce the identity program (see section 3 below for addresses
SYSTEM MANAGER(S) AND ADDRESS:
of the beneficiary). for intermediaries, section 4 for addresses for
Director, Division of Appeals carriers, and section 5 for addresses for the
POLICIES AND PRACTICES FOR STORING, Operations, Medicare Enrollment and Payment Safeguard Contractors).
RETRIEVING, ACCESSING, RETAINING, AND Appeals Group, Center for Beneficiary
DISPOSING OF RECORDS IN THE SYSTEM: 1. Central Office Address
Choices, CMS, Mail Stop S1–05–06,
STORAGE: 7500 Security Boulevard, Baltimore, CMS Data Center, 7500 Security Boulevard,
Maryland 21244–1850. North Building, First Floor, Baltimore,
All records are stored on computer Maryland 21244–1850.
diskette and magnetic storage media.
NOTIFICATION PROCEDURE: 2. CMS Regional Offices
RETRIEVABILITY: For purpose of access, the subject • Boston Region—Connecticut, Maine,
Information can be retrieved by the individual should write to the system Massachusetts, New Hampshire, Rhode
name, SSN, HICN, and assigned manager who will require the system Island, Vermont. John F. Kennedy Federal
provider number. name, HICN, address, date of birth, and Building, Room 1211, Boston, Massachusetts
gender, and for verification purposes, 02203. Office Hours: 8:30 a.m.–5 p.m.
SAFEGUARDS:
the subject individual’s name (woman’s • New York Region—New Jersey, New
CMS has safeguards in place for maiden name, if applicable), and SSN. York, Puerto Rico, Virgin Islands. 26 Federal
authorized users and monitors such Furnishing the SSN is voluntary, but it Plaza, Room 715, New York, New York
users to ensure against excessive or 10007. Office Hours: 8:30 a.m.–5 p.m.
may make searching for a record easier • Philadelphia Region—Delaware, District
unauthorized use. Personnel having and prevent delay.
jlentini on PROD1PC65 with NOTICES

of Columbia, Maryland, Pennsylvania,


access to the system have been trained Virginia, West Virginia. Post Office Box 8460,
in the Privacy Act and information RECORD ACCESS PROCEDURE:
Philadelphia, Pennsylvania 19101. Office
security requirements. Employees who For purpose of access, use the same Hours: 8: 30 a.m.–5 p.m.
maintain records in this system are procedures outlined in Notification • Atlanta Region—Alabama, North
instructed not to release data until the Procedures above. Requestors should Carolina, South Carolina, Florida, Georgia,

VerDate Aug<31>2005 14:51 Sep 14, 2006 Jkt 208001 PO 00000 Frm 00041 Fmt 4703 Sfmt 4703 E:\FR\FM\15SEN1.SGM 15SEN1
54494 Federal Register / Vol. 71, No. 179 / Friday, September 15, 2006 / Notices

Kentucky, Mississippi, Tennessee. 101 8115 Knue Road, Indianapolis, IN 46250– • Medicare Coordinator, Alabama B/S, 450
Marietta Street, Suite 702, Atlanta, Georgia 1936. Riverchase Parkway East, Birmingham, AL
30223. Office Hours: 8:30 a.m.–4:30 p.m. • Medicare Coordinator, Arkansas B/C, 35298.
• Chicago Region—Illinois, Indiana, 601 Gaines Street, Little Rock, AR 72203. • Medicare Coordinator, Cahaba GBA,
Michigan, Minnesota, Ohio, Wisconsin. Suite • Medicare Coordinator, Group Health of 12052 Middleground Road, Suite A,
A—824, Chicago, Illinois 60604. Office Oklahoma, 1215 South Boulder, Tulsa, OK Savannah, GA 31419.
Hours: 8 a.m.–4:45 p.m. 74119–2827. • Medicare Coordinator, Florida B/S, 532
• Dallas Region—Arkansas, Louisiana, • Medicare Coordinator, Trailblazer, P.O. Riverside Ave., Jacksonville, FL 32202–4918.
New Mexico, Oklahoma, Texas. 1200 Main Box 660156, Dallas, TX 75266–0156.
Tower Building, Dallas, Texas. Office Hours: • Medicare Coordinator, Administar
• Medicare Coordinator, Cahaba GBA, Federal, 9901 Linnstation Road, Louisville,
8 a.m.–4:30 p.m. Station 7, 636 Grand Avenue, Des Moines, IA
• Kansas Region—Iowa, Kansas, Missouri, KY 40223.
50309–2551. • Medicare Coordinator, Palmetto GBA, 17
Nebraska. New Federal Office Building, 601
• Medicare Coordinator, Kansas B/C, P.O. Technology Circle, Columbia, SC 29203–
East 12th Street—Room 436, Kansas City,
Box 239, 1133 Topeka Ave., Topeka, KS 0001.
Missouri 64106. Office Hours: 8 a.m.–4:45
p.m. 66629–0001. • Medicare Coordinator, CIGNA, 2 Vantage
• Denver Region—Colorado, Montana, • Medicare Coordinator, Nebraska B/C, Way, Nashville, TN 37228.
P.O. Box 3248, Main PO Station, Omaha, NE
North Dakota, South Dakota, Utah, Wyoming. • Medicare Coordinator, Railroad
Federal Office Building, 1961 Stout St— 68180–0001.
Retirement Board, 2743 Perimeter Parkway,
Room 1185, Denver, Colorado 80294. Office • Medicare Coordinator, Mutual of Omaha,
Building 250, Augusta, GA 30999.
Hours: 8 a.m.–4:30 p.m. P.O. Box 1602, Omaha, NE 68101.
• Medicare Coordinator, Cahaba GBA,
• San Francisco Region—American • Medicare Coordinator, Montana
B/C, P.O. Box 5017, Great Falls Div., Great Jackson Miss., P.O. Box 22545, Jackson, MI
Samoa, Arizona, California, Guam, Hawaii, 39225–2545.
Nevada. Federal Office Building, 10 Van Ness Falls, MT 59403–5017.
• Medicare Coordinator, Noridian, 4510 • Medicare Coordinator, Administar
Avenue, 20th Floor, San Francisco, California
94102. Office Hours: 8 a.m.–4:30 p.m. 13th Avenue S.W., Fargo, ND 58121–0001. Federal (IN), 8115 Knue Road, Indianapolis,
• Seattle Region—Alaska, Idaho, Oregon, • Medicare Coordinator, Utah B/C, P.O. IN 46250–1936.
Washington. 1321 Second Avenue, Room Box 30270, 2455 Parleys Way, Salt Lake City, • Medicare Coordinator, Wisconsin
615, Mail Stop 211, Seattle, Washington UT 84130–0270. Physicians Service, P.O. Box 8190, Madison,
98101. Office Hours: 8 a.m.–4:30 p.m. • Medicare Coordinator, Wyoming WI 53708–8190.
B/C, 4000 House Avenue, Cheyenne, WY • Medicare Coordinator, Nationwide
3. Intermediary Addresses (Hospital Mutual Insurance Co., P.O. Box 16788, 1
82003.
Insurance)
• Medicare Coordinator, Arizona B/C, P.O. Nationwise Plaza, Columbus, OH 3216–6788.
• Medicare Coordinator, Assoc. Hospital Box 37700, Phoenix, AZ 85069. • Medicare Coordinator, Arkansas B/S, 601
Serv. Main (ME BC), 2 Gannett Drive, South • Medicare Coordinator, UGS, P.O. Box Gaines Street, Little Rock, AR 72203.
Portland, ME 04106–6911. 70000, Van Nuys, CA 91470–0000. • Medicare Coordinator, Arkansas-New
• Medicare Coordinator, Anthem New • Medicare Coordinator, Regents BC, P.O. Mexico, 601 Gaines Street, Little Rock, AR
Hampshire, 300 Goffs Falls Road, Box 8110 M/S D–4A, Portland, OR 97207– 72203.
Manchester, NH 03111–0001. 8110. • Medicare Coordinator, Palmetto GBA—
• Medicare Coordinator, BC/BS Rhode • Medicare Coordinator, Premera BC, P.O. DMERC, 17 Technology Circle, Columbia SC
Island (RI BC), 444 Westminster Street, Box 2847, Seattle, WA 98111–2847. 29203–0001.
Providence, RI 02903–3279.
• Medicare Coordinator, Trailblazer Health
• Medicare Coordinator, Empire Medicare 4. Medicare Carriers
Services, 400 S. Salina Street, Syracuse, NY Enterprises, 901 South Central Expressway,
• Medicare Coordinator, NHIC, 75 Sargent Richardson, TX 75080.
13202. William Terry Drive, Hingham, MA 02044.
• Medicare Coordinator, Cooperativa, P.O. • Medicare Coordinator, Nordian, 636
• Medicare Coordinator, B/S Rhode Island Grand Avenue, Des Moines, IA 50309–2551.
Box 363428, San Juan, PR 00936–3428. (RI BS), 444 Westminster Street, Providence,
• Medicare Coordinator, Maryland B/C, • Medicare Coordinator, Kansas B/S, P.O.
RI 02903–2790. Box 239, 1133 Topeka Ave., Topeka, KS
P.O. Box 4368, 1946 Greenspring Ave., • Medicare Coordinator, Trailblazer Health
Timonium, MD 21093. 66629.
Enterprises, Meriden Park, 538 Preston Ave.,
• Medicare Coordinator, Highmark, P5103, • Medicare Coordinator, Kansas B/S—NE,
Meriden, CT 06450.
120 Fifth Avenue Place, Pittsburgh, PA P.O. Box 239, 1133 Topeka Ave., Topeka, KS
• Medicare Coordinator, Upstate Medicare
15222–3099. 66629.
Division, 11 Lewis Road, Binghamton, NY
• Medicare Coordinator, United • Medicare Coordinator, Montana B/S,
13902.
Government Services, 1515 N. Rivercenter P.O. Box 4309, Helena, MT 59601.
• Medicare Coordinator, Empire Medicare
Dr., Milwaukee, WI 53212.
Services, 2651 Strang Blvd., Yorktown • Medicare Coordinator, Nordian, 4305
• Medicare Coordinator, Alabama B/C, 450 13th Avenue South, Fargo, ND 58103–3373.
Riverchase Parkway East, Birmingham, AL Heights, NY 10598.
• Medicare Coordinator, Empire Medicare • Medicare Coordinator, Noridian
35298. BCBSND (CO), 730 N. Simms #100, Golden,
• Medicare Coordinator, Florida B/C, 532 Services, NJ, 300 East Park Drive, Harrisburg,
PA 17106. CO 80401–4730.
Riverside Ave., Jacksonville, FL 32202–4918. • Medicare Coordinator, Noridian
• Medicare Coordinator, Georgia B/C, P.O. • Medicare Coordinator, Triple S, #1441
F.D., Roosevelt Ave., Guaynabo, PR 00968. BCBSND (WY), 4305 13th Avenue South,
Box 9048, 2357 Warm Springs Road, Fargo, ND 58103–3373.
Columbus, GA 31908. • Medicare Coordinator, Group Health
Inc., 4th Floor, 88 west End Avenue, New • Medicare Coordinator, Utah B/S, P.O.
• Medicare Coordinator, Mississippi B/C B
York, NY 10023. Box 30270, 2455 Parleys Way, Salt Lake City,
MS, P.O. Box 23035, 3545 Lakeland Drive,
Jackson, MI 9225–3035. • Medicare Coordinator, Highmark, P.O. UT 84130–0270.
• Medicare Coordinator, North Carolina B/ Box 89065, 1800 Center Street, Camp Hill, • Medicare Coordinator, Transamerica
C, P.O. Box 2291, Durham, NC 27702–2291. PA 17089–9065. Occidental, P.O. Box 54905, Los Angeles, CA
• Medicare Coordinator, Palmetto GBA A/ • Medicare Coordinator, Trailblazers Part 90054–4905.
RHHI, 17 Technology Circle, Columbia, SC B, 11150 McCormick Drive, Executive Plaza • Medicare Coordinator, NHIC—
3 Suite 200, Hunt Valley, MD 21031. California, 450 W. East Avenue, Chico, CO
jlentini on PROD1PC65 with NOTICES

29203–0001.
• Medicare Coordinator, Tennessee B/C, • Medicare Coordinator, Trailblazer Health 95926.
801 Pine Street, Chattanooga, TN 37402– Enterprises, Virginia, P.O. Box 26463, • Medicare Coordinator, Cigna, Suite 254,
2555. Richmond, VA 23261–6463. United Medicare 3150 Lakeharbor, Boise, ID 83703.
• Medicare Coordinator, Anthem Coordinator, Tricenturion, 1 Tower Square, • Medicare Coordinator, Cigna, Suite 506,
Insurance Co. (Anthem IN), P.O. Box 50451, Hartford, CT 06183. 2 Vantage Way, Nashville, TN 37228.

VerDate Aug<31>2005 14:51 Sep 14, 2006 Jkt 208001 PO 00000 Frm 00042 Fmt 4703 Sfmt 4703 E:\FR\FM\15SEN1.SGM 15SEN1
Federal Register / Vol. 71, No. 179 / Friday, September 15, 2006 / Notices 54495

5. Payment Safeguard Contractors 0573.’’ The program is mandated by 27, 2001)); and Integrated Data
• Medicare Coordinator, Aspen Systems Section 723 of the Medicare Repository, System No. 09–70–0571 (To
Corporation, 2277 Research Blvd., Rockville, Prescription Drug Improvement and be published).
MD 20850. Modernization Act of 2003 (MMA)
• Medicare Coordinator, DynCorp
The purpose of this system is to
(Public Law (Pub. L.) 108–173), which collect and maintain a person-level view
Electronic Data Systems (EDS), 11710 Plaza was enacted into law on December 8,
America Drive 5400 Legacy Drive, Reston, of identifiable data to establish a data
VA 20190–6017.
2003, and amended Title XVIII of the repository to study chronically ill
• Medicare Coordinator, Lifecare Social Security Act (the Act). The CCDR Medicare beneficiaries. This system will
management Partners Mutual of Omaha program seeks to establish a data utilize data extraction tools to support
Insurance Co., 6601 Little Rive Turnpike, repository to study chronically ill accessing data by chronic conditions
Suite 300 Mutual of Omaha Plaza, Omaha, Medicare beneficiaries. This data and process complex customized
NE 68175. repository will integrate existing data to
• Medicare Coordinator, Reliance research data requests related to chronic
support studies for improving the illnesses. Information retrieved from
Safeguard Solutions, Inc., P.O. Box 30207 quality of care and studies for reducing
400 South Salina Street, 2890 East this system may be disclosed to: (1)
Cottonwood Parkway, Syracuse, NY 13202.
the cost of care for chronically ill Support regulatory, reimbursement, and
• Medicare Coordinator, Science Medicare beneficiaries. The statute is
policy functions performed within the
Applications International Inc., 6565 designed to reduce program spending,
agency or by a contractor, grantee,
Arlington Blvd. P.O. Box 100282, Falls make current Medicare program data
consultant or other legal agent; (2) assist
Church, VA. more readily available to researchers to
• Medicare Coordinator, California
another Federal or state agency with
study chronic illness in the Medicare
Medical Review, Inc., Integriguard Division information to contribute to the
population, improve process time for
Federal Sector Civil Group One Sansome accuracy of CMS’s proper payment of
research data request, focus on analytic
Street, San Francisco, CA 94104–4448. Medicare benefits, enable such agency
prospective verses operational, and
• Medicare Coordinator, Computer to administer a Federal health benefits
Sciences Corporation Suite 600 3120 utilize data extraction tools to organize
program, or to enable such agency to
Timanus Lane, Baltimore, MD 21244. the data.
fulfill a requirement of Federal statute
• Medicare Coordinator, Electronic Data The data collected and maintained in or regulation that implements a health
System (EDS), 11710 Plaza American Drive, this system are retrieved from the
5400 Legacy Drive, Plano, TX 75204.
benefits program funded in whole or in
following databases: Medicare Drug part with Federal funds; (3) support an
• Medicare Coordinator, TriCenturion, Data Processing System, System No. 09–
L.L.C., P.O. Box 100282, Columbia, SC individual or organization for a research
70–0553 (70 Federal Register (FR) project or in support of an evaluation
29202.
58436 (October 6, 2005)); Medicare project related to the prevention of
6. Qualified Independent Contractors Beneficiary Database, System No. 09– disease or disability, the restoration or
• Medicare Contractor, Maximus Federal 70–0536 (66 FR 63392 (December 6, maintenance of health, or payment
Services, Inc., 1040 First Avenue, Suite 400, 2001)); Medicare Advantage related projects; (4) support Quality
King of Prussia, PA 19406. Prescription Drug System, System No.
• Medicare Contractor, Maximus Federal Improvement Organizations (QIO); (5)
09–70–4001 (70 FR 60530 (October 18,
Services, Inc., 50 Square Drive, Victor, NY support litigation involving the agency;
2005)); Medicaid Statistical Information
19406. and (6) combat fraud, waste, and abuse
System, System No. 09–70–6001 (67 FR
• Medicare Contractor, Q2 Administrators, in certain Federally-funded health
17 Technology Circle, Columbia, SC 29203. 48906 (July 26, 2002)); Retiree Drug
benefits programs. We have provided
• Medicare Contractor, Q2 Administrators, Subsidy Program, System No. 09–70–
background information about the new
5150 East Dublin-Granville Road, Suite 200, 0550 (70 FR 41035 (July 15, 2005));
system in the SUPPLEMENTARY
Westerville, OH 43081. Common Working File, System No. 09–
INFORMATION section below. Although
• Medicare Contractor, First Coast Service 70–0526 (67 FR 3210 (January 23,
Options, 532 Riverside Avenue, Jacksonville,
the Privacy Act requires only that CMS
2002)); National Claims History, System
FL 32202. provide an opportunity for interested
No. 09–70–0005 (67 FR 57015
persons to comment on the proposed
[FR Doc. E6–15128 Filed 9–14–06; 8:45 am] (September 6, 2002)); Enrollment
routine uses, CMS invites comments on
Database, System No. 09–70–0502 (67
BILLING CODE 4120–03–P all portions of this notice. See ‘‘Effective
FR 3203 (January 23, 2002)); Carrier
Dates’’ section for comment period.
Medicare Claims Record, System No.
DEPARTMENT OF HEALTH AND 09–70–0501 (67 FR 54428 (August 22, DATES: Effective Date: CMS filed a new
HUMAN SERVICES 2002)); Intermediary Medicare Claims SOR report with the Chair of the House
Record, System No. 09–70–0503 (67 FR Committee on Government Reform and
Centers for Medicare & Medicaid 65982 (October 29, 2002)); Unique Oversight, the Chair of the Senate
Services Physician/Provider Identification Committee on Homeland Security &
Number, System No. 09–70–0525 (69 FR Governmental Affairs, and the
Privacy Act of 1974; Report of a New 75316 (December 16, 2004)); Medicare Administrator, Office of Information
System of Records Supplier Identification File, System No. and Regulatory Affairs, Office of
AGENCY: Department of Health and 09–70–0530 (67 FR 48184 (July 23, Management and Budget (OMB) on
Human Services (HHS), Center for 2002)), A Current Beneficiary Survey, September 6, 2006. To ensure that all
Medicare & Medicaid Services (CMS). System No. 09–70–6002 (66 FR 15496 parties have adequate time in which to
ACTION: Notice of a New System of (March 19, 2001)); National Plan & comment, the new system will become
Records (SOR). Provider Enumerator System, System effective 30 days from the publication of
No. 09–70–0008, (63 FR 40297 (July 28, the notice, or 40 days from the date it
jlentini on PROD1PC65 with NOTICES

SUMMARY: In accordance with the 1998)); Long Term Care MDS, System was submitted to OMB and the
requirements of the Privacy Act of 1974, No. 09–70–1517 (67 FR 6714 (February Congress, whichever is later. We may
we are proposing to establish a new 13, 2002)); HHA Outcome and defer implementation of this system or
system titled, ‘‘Chronic Condition Data Assessment Information Set, System No. one or more of the routine use
Repository (CCDR), System No. 09–70– 09–70–9002 (66 FR 66903 (December statements listed below if we receive

VerDate Aug<31>2005 14:51 Sep 14, 2006 Jkt 208001 PO 00000 Frm 00043 Fmt 4703 Sfmt 4703 E:\FR\FM\15SEN1.SGM 15SEN1

Вам также может понравиться