42 CFR § 431.303
State authority for safeguarding information
June 11, 2020
The Medicaid agency must have authority to implement and enforce the provisions specified in this subpart for safeguarding information about applicants and beneficiaries.