<?xml version='1.0' encoding='utf-8'?>
<regulation prefix="Regulation" num=".06" citation="COMAR 10.25.06.06" title_num="10" subtitle_num="25" chapter_num="06" heading="Protection of Confidential Information in Submissions.">
  <paragraph num="A.">
    <text>To assure that confidential records or information are protected, each reporting entity shall encrypt each of the following data elements in such a manner that each unique value for a data element produces an identical unique encrypted data element:</text>
    <paragraph num="(1)">
      <text>Patient or enrollee identifier; and</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Internal subscriber contract number.</text>
    </paragraph>
  </paragraph>
  <paragraph num="B.">
    <text>In order to maintain a consistent and unique identifier for each patient across providers, payors, and services, the Commission shall:</text>
    <paragraph num="(1)">
      <text>Provide selected data to the State-designed HIE for the creation and encryption of a Master Patient Index; and</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Include Master Patient Index identifiers received from the State-designated HIE in each eligibility data report submitted under Regulation .11 of this chapter.</text>
    </paragraph>
  </paragraph>
  <paragraph num="C.">
    <text>Each reporting entity shall maintain the security and preserve the confidentiality of the encrypted data.</text>
  </paragraph>
</regulation>