CFR > Title 42 - Public Health > CHAPTER IV—CENTERS FOR MEDICARE & MEDICAID SERVICES, DEPARTMENT OF HEALTH AND HUMAN SERVICES > SUBCHAPTER D—STATE CHILDREN'S HEALTH INSURANCE PROGRAMS (SCHIPs) (parts 457 to 457) > PART 457—ALLOTMENTS AND GRANTS TO STATES > SUBPART K—State Plan Requirements: Applicant and Enrollee Protections (§457.1100 to §457.1190) > 457.1110—Privacy protections.

457.1110—Privacy protections.

(a) Information disclosure. The State must make accurate, easily understood, linguistically appropriate information available to families of potential applicants, applicants and enrollees, and provide assistance to these families in making informed decisions about their health plans, professionals, and facilities.
(b) Required information. The State must make available to potential applicants and provide applicants and enrollees the following information in a timely manner:
(1) Types of benefits, and amount, duration and scope of benefits available under the program.
(2) Cost-sharing requirements as described in § 457.525.
(3) Names and locations of current participating providers.
(4) If an enrollment cap is in effect or the State is using a waiting list, a description of the procedures relating to the cap or waiting list, including the process for deciding which children will be given priority for enrollment, how children will be informed of their status on a waiting list and the circumstances under which enrollment will reopen.
(5) Information on physician incentive plans as required by § 457.985.
(6) Review processes available to applicants and enrollees as described in the State plan pursuant to § 457.1120.
(a) Statutory basis. This subpart interprets and implements—
(1) Section 2101(a) of the Act, which states that the purpose of title XXI of the Act is to provide funds to States to enable them to initiate and expand the provision of child health assistance to uninsured, low-income children in an effective and efficient manner;
(2) Section 2102(a)(7)(B) of the Act, which requires that the State plan include a description of the methods used to assure access to covered services, including emergency services;
(3) Section 2102(b)(2) of the Act, which requires that the State plan include a description of methods of establishing and continuing eligibility and enrollment; and
(4) Section 2103 of the Act, which outlines coverage requirements for a State that provides child health assistance through a separate child health program.
(b) Scope. This subpart sets forth minimum standards for privacy protection and for procedures for review of matters relating to eligibility, enrollment, and health services.
(c) Applicability. This subpart only applies to a separate child health program.
The State must ensure that, for individual medical records and any other health and enrollment information maintained with respect to enrollees, that identifies particular enrollees (in any form), the State establishes and implements procedures to—
(a) Abide by all applicable Federal and State laws regarding confidentiality and disclosure, including those laws addressing the confidentiality of information about minors and the privacy of minors, and privacy of individually identifiable health information;
(b) Comply with subpart F of part 431 of this chapter ;
(c) Maintain the records and information in a timely and accurate manner;
(d) Specify and make available to any enrollee requesting it—
(1) The purposes for which information is maintained or used; and
(2) To whom and for what purposes the information will be disclosed outside the State;
(e) Except as provided by Federal and State law, ensure that each enrollee may request and receive a copy of records and information pertaining to the enrollee in a timely manner and that an enrollee may request that such records or information be supplemented or corrected.