42 CFR § 425.708 - Beneficiaries may decline claims data sharing.
(1) FFS beneficiaries are notified about the opportunity to decline claims data sharing through CMS materials such as the Medicare & You Handbook and through the notifications required under § 425.312.
(2) The notifications provided under § 425.312 must state that the ACO may have requested beneficiary identifiable claims data about the beneficiary for purposes of its care coordination and quality improvement work, and inform the beneficiary how to decline having his or her claims information shared with the ACO in the form and manner specified by CMS.
(c) In accordance with 42 U.S.C. 290dd–2 and the implementing regulations at 42 CFR part 2, CMS does not share beneficiary identifiable claims data relating to the diagnosis and treatment of alcohol and substance abuse without the explicit written consent of the beneficiary.
(d) The provisions of this section relate only to the sharing of Medicare claims data between the Medicare program and the ACO under the Shared Savings Program and are in no way intended to impede existing or future data sharing under other authorities.