[Code of Federal Regulations] [Title 42, Volume 3] [Revised as of October 1, 2004] From the U.S. Government Printing Office via GPO Access [CITE: 42CFR438.224] [Page 216] TITLE 42--PUBLIC HEALTH CHAPTER IV--CENTERS FOR MEDICARE & MEDICAID SERVICES, DEPARTMENT OF HEALTH AND HUMAN SERVICES (CONTINUED) PART 438_MANAGED CARE--Table of Contents Subpart D_Quality Assessment and Performance Improvement Sec. 438.224 Confidentiality. The State must ensure, through its contracts, that (consistent with subpart F of part 431 of this chapter), for medical records and any other health and enrollment information that identifies a particular enrollee, each MCO, PIHP, and PAHP uses and discloses such individually identifiable health information in accordance with the privacy requirements in 45 CFR parts 160 and 164, subparts A and E, to the extent that these requirements are applicable.