DISCLOSURE OF PREDICTIVE MODELING AND OTHER ANALYTICS TECHNOLOGIES TO IDENTIFY AND PREVENT WASTE, FRAUD, AND ABUSE[110]
Sec. 1128K. [42 U.S.C. 1320a-7m] (a) Reference to Predictive Modeling Technologies Requirements.—For provisions relating to the use of predictive modeling and other analytics technologies to identify and prevent waste, fraud, and abuse with respect to the Medicare program under title XVIII, the Medicaid program under title XIX, and the Children's Health Insurance Program under title XXI, see section 4241 of the Small Business Jobs Act of 2010 (42 U.S.C. 1320a-7m).
(b) Limiting Disclosure of Predictive Modeling Technologies.—In implementing such provisions under such section 4241 with respect to covered algorithms (as defined in subsection (c)), the following shall apply:
(1) Nonapplication of foia.—The covered algorithms used or developed for purposes of such section 4241 (including by the Secretary or a State (or an entity operating under a contract with a State)) shall be exempt from disclosure under section 552(b)(3) of title 5, United States Code.
(2)Limitation with respect to use and disclosure of information by state agencies.—
(A) In general.—A State agency may not use or disclose covered algorithms used or developed for purposes of such section 4241 except for purposes of administering the State plan (or a waiver of the plan) under the Medicaid program under title XIX or the State child health plan (or a waiver of the plan) under the Children's Health Insurance Program under title XXI, including by enabling an entity operating under a contract with a State to assist the State to identify or prevent waste, fraud, and abuse with respect to such programs.
(B) Information security.—A State agency shall have in effect data security and control policies that the Secretary finds adequate to ensure the security of covered algorithms used or developed for purposes of such section 4241 and to ensure that access to such information is restricted to authorized persons for purposes of authorized uses and disclosures described in subparagraph (A).
(C) Procedural requirements.—State agencies to which information is disclosed pursuant to such section 4241 shall adhere to uniform procedures established by the Secretary.
Information which the Inspector General may obtain under paragraph (1) includes any supporting documentation necessary to validate claims for payment or payments under title XVIII or XIX, including a prescribing physician’s medical records for an individual who is prescribed an item or service which is covered under part B of title XVIII, a covered part D drug (as defined in section 1860D–2(e)) for which payment is made under an MA–PD plan under part C of such title, or a prescription drug plan under part D of such title, and any records necessary for evaluation of the economy, efficiency, and effectiveness of the programs under titles XVIII and XIX.
(c) Covered Algorithm Defined.—In this section, the term “covered algorithm”—
(1) means a predictive modeling or other analytics technology, as used for purposes of section 4241(a) of the Small Business Jobs Act of 2010 (42 U.S.C. 1320a-7m(a)) to identify and prevent waste, fraud, and abuse with respect to the Medicare program under title XVIII, the Medicaid program under title XIX, and the Children's Health Insurance Program under title XXI; and
(2) includes the mathematical expressions utilized in the application of such technology and the means by which such technology is developed.
[110] P.L.114-255, §706(a) added section (1128K). Effective December 10, 2016.