60.15—Confidentiality of National Practitioner Data Bank information.

(a) Limitations on disclosure. Information reported to the NPDB is considered confidential and shall not be disclosed outside the Department of Health and Human Services, except as specified in §§ 60.12, 60.13, and 60.16. Persons who, and entities which, receive information from the NPDB either directly or from another party must use it solely with respect to the purpose for which it was provided. Nothing in this paragraph shall prevent the disclosure of information by a party which is authorized under applicable State law to make such disclosure.
(b) Penalty for violations. Any person who violates paragraph (a) shall be subject to a civil money penalty of up to $11,000 for each violation. This penalty will be imposed pursuant to procedures at 42 CFR part 1003.