---
kind: "section"
citation: "42 C.F.R. § 438.224"
title: "42"
number: "438.224"
heading: "Confidentiality."
url: "https://uscodex.org/cfr/42/438.224"
---

# §438.224. Confidentiality.


The State must ensure, through its contracts, that (consistent with [subpart F of part 431](/cfr/42/part431-subpartF.md) of this chapter), for medical records and any other health and enrollment information that identifies a particular enrollee, each MCO, PIHP, and PAHP uses and discloses such individually identifiable health information in accordance with the privacy requirements in 45 CFR parts [160](/cfr/45/part160.md) and [164](/cfr/45/part164.md), subparts [A](/cfr/42/subpartA.md) and [E](/cfr/42/subpartE.md), to the extent that these requirements are applicable.


## Notes

### Source

Source: 81 FR 27853, May 6, 2016, unless otherwise noted.

### Authority

Authority: 42 U.S.C. 1302.

### Source

Source: 67 FR 41095, June 14, 2002, unless otherwise noted.
