42 CFR §423.162

1. (a)General rule. Quality improvement organizations (QIOs) are required to offer providers, practitioners, and Part D sponsors quality improvement assistance pertaining to health care services, including those related to prescription drug therapy, in accordance with contracts established with the Secretary.
2. (b)Collection of information. Information collected, acquired, or generated by a QIO in the performance of its responsibilities under this section is subject to the confidentiality provisions of part 480 of this chapter. Part D sponsors are required to provide specified information to CMS for distribution to the QIOs as well as directly to QIOs.
3. (c)Applicability of QIO confidentiality provisions. The provisions of part 480 of this chapter apply to Part D sponsors in the same manner as such provisions apply to institutions under part 480 of this chapter.