CMS contractors may require access to CMS data to conduct their contracted work. Disclosure of data containing protected health information, personally identifiable information, or other controlled information to CMS contractors requires a data use agreement (DUA) with CMS. The DUA ensures contractor compliance with various laws, regulations, and CMS policies. It also creates a traceable record of the data files being accessed by each CMS contractor.
For more information or to get started with a CMS contractor DUA see the Contractors DUA page.