Section 1902(a)(7) of the Social Security Act and 42 CFR Subpart F require Medicaid agencies to provide safeguards that restrict the use or disclosure of information about applicants and recipients to purposes directly connected with the administration of the Medicaid Program.
Purposes directly related to administration of the Medicaid Program include establishing eligibility, providing services for recipients, determining the amount of medical assistance, and conducting or assisting an investigation, prosecution, or civil or criminal proceeding related to the administration of the program.
At a minimum, the types of information about applicants and recipients that must be safeguarded and not released without consent include:
See Administrative Notice:
A-14-98 Subpoenas for Public Assistance Records
Medicaid providers have a contractual obligation to safeguard information about Medicaid recipients. Providers may have access to certain eligibility information if they can provide:
· | a Medicaid identification number (MCI) |
or
· | two of the following identifying factors: individual's full name, date of birth, Social Security number; |
AND
the date of service.
Providers who supply the above identifying factors may be given the following information:
NOTE: Transportation providers may be given the address and phone number of the recipient because this information is necessary to provide the service.
At the time of application, individuals are informed that all eligibility information is confidential and disclosure without written permission of the individual is limited. Medicaid has the authority to responsibly share information concerning applicants and recipients with:
Information may be released to comply with a subpoena or other valid court order and in emergency situations when necessary to protect or warn others of imminent threats to their safety. In these circumstances, the case record will be documented with the reason for the disclosure and written notification of the disclosure will be sent to the client's last known address.
Medicaid must obtain specific written permission from the individual before releasing information to other persons or sources.
16 Del. Admin. Code § 14000-14840