42 C.F.R. § 438.224 Confidentiality.
Title 42 - Public Health
The State must ensure, through its contracts, that (consistent with subpart F of part 431 of this chapter), for medical records and any other health and enrollment information that identifies a particular enrollee, each MCO, PIHP, and PAHP uses and discloses such individually identifiable health information in accordance with the privacy requirements in 45 CFR parts 160 and 164, subparts A and E, to the extent that these requirements are applicable.
Title 42: Public Health
PART 438—MANAGED CARE
Subpart D—Quality Assessment and Performance Improvement
Structure and Operation Standards
§ 438.224 Confidentiality.