AUTHORIZATION TO RECEIVE RELEVANT INFORMATION[407]
Sec. 1942. [42 U.S.C. 1396w-2] (a) In General.—Notwithstanding any other provision of law, a Federal or State agency or private entity in possession of the sources of data directly relevant to eligibility determinations under this title (including eligibility files maintained by Express Lane agencies described in section 1902(e)(13)(F), information described in paragraph (2) or (3) of section 1137(a), vital records information about births in any State, and information described in sections 453(i) and 1902(a)(25)(I)) is authorized to convey such data or information to the State agency administering the State plan under this title, to the extent such conveyance meets the requirements of subsection (b).
(b) Requirements for Conveyance.—Data or information may be conveyed pursuant to subsection (a) only if the following requirements are met:
(1) The individual whose circumstances are described in the data or information (or such individual’s parent, guardian, caretaker relative, or authorized representative) has either provided advance consent to disclosure or has not objected to disclosure after receiving advance notice of disclosure and a reasonable opportunity to object.
(2) Such data or information are used solely for the purposes of—
(A) identifying individuals who are eligible or potentially eligible for medical assistance under this title and enrolling or attempting to enroll such individuals in the State plan; and
(B) verifying the eligibility of individuals for medical assistance under the State plan.
(3) An interagency or other agreement, consistent with standards developed by the Secretary—
(A) prevents the unauthorized use, disclosure, or modification of such data and otherwise meets applicable Federal requirements safeguarding privacy and data security; and
(B) requires the State agency administering the State plan to use the data and information obtained under this section to seek to enroll individuals in the plan.
(c) Penalties for Improper Disclosure.—
(1) Civil money penalty.—A private entity described in the subsection (a) that publishes, discloses, or makes known in any manner, or to any extent not authorized by Federal law, any information obtained under this section is subject to a civil money penalty in an amount equal to $10,000 for each such unauthorized publication or disclosure. The provisions of section 1128A (other than subsections (a) and (b) and the second sentence of subsection (f)) shall apply to a civil money penalty under this paragraph in the same manner as such provisions apply to a penalty or proceeding under section 1128A(a).
(2) Criminal penalty.—A private entity described in the subsection (a) that willfully publishes, discloses, or makes known in any manner, or to any extent not authorized by Federal law, any information obtained under this section shall be fined not more than $10,000 or imprisoned not more than 1 year, or both, for each such unauthorized publication or disclosure.
(d) Rule of Construction.—The limitations and requirements that apply to disclosure pursuant to this section shall not be construed to prohibit the conveyance or disclosure of data or information otherwise permitted under Federal law (without regard to this section).
[407] See Vol. II, P.L. 111-3, §203(e), with respect to authorization for States electing Express Lane Option to receive certain data.