This regulation requires Home Health Agencies (HHAs) and their contracted agents to maintain the confidentiality of all patient-identifiable OASIS data contained in clinical records and prohibits its public release. This is a Medicare Conditions of Participation requirement specific to home health agencies.
View official source§ 484.40 Condition of participation: Release of patient identifiable OASIS information. The HHA and agent acting on behalf of the HHA in accordance with a written contract must ensure the confidentiality of all patient identifiable information contained in the clinical record, including OASIS data, and may not release patient identifiable OASIS information to the public.