42 U.S.C. § 1320a–7n — Disclosure of predictive modeling and other analytics technologies to identify and prevent waste, fraud, and abuse

A State agency may not use or disclose covered algorithms used or developed for purposes of such section 1320a–7m except for purposes of administering the State plan (or a waiver of the plan) under the Medicaid program under subchapter XIX or the State child health plan^* (or a waiver of the plan) under the Children’s Health Insurance Program under subchapter XXI, including by enabling an entity operating under a contract with a State to assist the State to identify or prevent waste, fraud, and abuse with respect to such programs.

A State agency shall have in effect data security and control policies that the Secretary finds adequate to ensure the security of covered algorithms used or developed for purposes of such section 1320a–7m and to ensure that access to such information is restricted to authorized persons for purposes of authorized uses and disclosures described in subparagraph (A).

State agencies to which information is disclosed pursuant to such section 1320a–7m shall adhere to uniform procedures established by the Secretary.