CMS System of Records Notices (SORN)

A System of Records Notice (SORN) is a notice to the public that describes how a federal agency collects and maintains Personally Identifiable Information (PII). A SORN is required whenever the agency collects and stores PII, and retrieves those records through the use of a unique identifier. The Privacy Act of 1974 requires publication of SORNs in the Federal Register, which is available to the public for review. CMS SORN publications provide the public with open and clear communication about the agency’s authority to collect, use, and disclose PII, as well as how an individual can access and amend their records. SORNs are required whenever CMS establishes or modifies the collection, use, or disclosure of PII.

To access CMS SORNS notices, visit HHS SORNS. If you have questions about a CMS System of Records Notice, contact the System Manager listed on the notice, or Privacy@cms.hhs.gov