{"data":{"id":"us/42-cfr-438.224","jurisdiction":"us","citation":"42 CFR 438.224","heading":"Confidentiality.","body":"The State must ensure, through its contracts, that (consistent with subpart F of part 431 of this chapter), for medical records and any other health and enrollment information that identifies a particular enrollee, each MCO, PIHP, and PAHP uses and discloses such individually identifiable health information in accordance with the privacy requirements in 45 CFR parts 160 and 164, subparts A and E, to the extent that these requirements are applicable.","path":["Title 42—Public Health","CHAPTER IV—CENTERS FOR MEDICARE \u0026 MEDICAID SERVICES, DEPARTMENT OF HEALTH AND HUMAN SERVICES","SUBCHAPTER C—MEDICAL ASSISTANCE PROGRAMS","PART 438—MANAGED CARE","Subpart D—MCO, PIHP and PAHP Standards"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-42.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:26:11Z","sha256":"857d3e7b7d963ce8415cb52c5b2cde361322202dc6b632116f06cee61d04bb7a","source_id":"us-cfr","stale":true,"prev":"us/42-cfr-438.214","next":"us/42-cfr-438.228"},"notice":"GroundRules: Original legal text. Not legal advice."}