StacksVerified U.S. regulatory reference

42 CFR §484.40

Verified against eCFR.gov as of June 20, 2026View official text on eCFR.gov ↗
The HHA and agent acting on behalf of the HHA in accordance with a written contract must ensure the confidentiality of all patient identifiable information contained in the clinical record, including OASIS data, and may not release patient identifiable OASIS information to the public.