42 CFR § 431.305 - Types of information to be safeguarded.

---
identifier: "/us/cfr/t42/s431.305"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "42 CFR § 431.305 - Types of information to be safeguarded."
title_number: 42
title_name: "Public Health"
section_number: "431.305"
section_name: "Types of information to be safeguarded."
chapter_name: "CENTERS FOR MEDICARE & MEDICAID SERVICES, DEPARTMENT OF HEALTH AND HUMAN SERVICES"
subchapter_number: "C"
subchapter_name: "MEDICAL ASSISTANCE PROGRAMS"
part_number: "431"
part_name: "STATE ORGANIZATION AND GENERAL ADMINISTRATION"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "42 U.S.C. 1302."
regulatory_source: "43 FR 45188, Sept. 29, 1978, unless otherwise noted."
cfr_part: "431"
---


# 431.305 Types of information to be safeguarded.

(a) The agency must have criteria that govern the types of information about applicants and beneficiaries that are safeguarded.

(b) This information must include at least—

(1) Names and addresses;

(2) Medical services provided;

(3) Social and economic conditions or circumstances;

(4) Agency evaluation of personal information;

(5) Medical data, including diagnosis and past history of disease or disability; and

(6) Any information received for verifying income eligibility and amount of medical assistance payments (see § 435.940 through § 435.965 of this subchapter). Income information received from SSA or the Internal Revenue Service must be safeguarded according to the requirements of the agency that furnished the data, including section 6103 of the Internal Revenue Code, as applicable.

(7) Any information received in connection with the identification of legally liable third party resources under § 433.138 of this chapter.

(8) Social Security Numbers.

[44 FR 17934, Mar. 29, 1979, as amended at 51 FR 7210, Feb. 28, 1986; 52 FR 5975, Feb. 27, 1987; 77 FR 17203, Mar. 23, 2012]