42 CFR § 484.40
Condition of participation: Release of patient identifiable OASIS information
June 11, 2020
The HHA and agent acting on behalf of the HHA in accordance with a written contract must ensure the confidentiality of all patient identifiable information contained in the clinical record, including OASIS data, and may not release patient identifiable OASIS information to the public.