Title 42 › Chapter CHAPTER 7— - SOCIAL SECURITY › Subchapter SUBCHAPTER XIX— - GRANTS TO STATES FOR MEDICAL ASSISTANCE PROGRAMS › § 1396w–2
Agencies and some private groups that hold data used to decide Medicaid eligibility can send that data to the State agency that runs Medicaid. This includes data from certain program files, birth records, and other specified sources. They may only share the data if the person (or their parent, guardian, caretaker, or chosen representative) gave advance consent or was told in advance and did not object, if the data is used only to find, enroll, or check eligibility for Medicaid, and if there is a written agreement that meets the Secretary’s standards to protect the data and requires the State to try to enroll people. A private group that makes an unauthorized disclosure of this information faces a $10,000 civil penalty for each improper release. If the disclosure was done willfully, the group can be fined up to $10,000, jailed up to 1 year, or both, for each release. These rules do not stop any data sharing that other federal law already allows.
Full Legal Text
The Public Health and Welfare — Source: USLM XML via OLRC
Legislative History
Reference
Citation
42 U.S.C. § 1396w–2
Title 42 — The Public Health and Welfare
Last Updated
Apr 6, 2026
Release point: 119-73