CMS Data Disclosures and Data Use Agreements (DUAs): Extensions and Closures
Guidance for extensions and closures related to the data use agreements.
Issued by: Centers for Medicare & Medicaid Services (CMS)
Issue Date: March 20, 2020
The Centers for Medicare & Medicaid Services (CMS) Data Use Agreements (DUAs) may only be approved for a period of up to one year. After one year, the DUA will expire unless the DUA requester either extends or closes the DUA. If a DUA for an organization expires, it is important to note that ALL open DUAs for that organization will be frozen. This means that no new DUAs or actions on existing DUAs (e.g., adding data or changing contacts) will be processed for any DUAs held by that organization until the expired DUA is either extended or closed.
The DUA system will send the DUA contacts (requester, custodians, additional contacts and COR) notification e-mails at the following intervals, before the DUA expires: 60 days, 30 days, 15 days, and every day thereafter.
Please Note: For information on extending or closing a Research Identifiable File (RIF) DUA, please visit ResDAC’s Managing Your Project page.
- Extending or Closing a Contractor DUA
CMS contractors are required to process DUA requests in EPPE. Please see the Contractor web page for instructions on how to extend/close DUAs.
- Extending or Closing a Limited Data Set (LDS) DUA
LDS requesters are required to process DUA requests in EPPE. Please see the LDS web page for instructions on how to extend/close DUAs.
- Extending or Closing a Researcher DUA
For information on extending or closing a Research Identifiable File (RIF) DUA, please visit ResDAC’s Managing Your Project page.
HHS is committed to making its websites and documents accessible to the widest possible audience, including individuals with disabilities. We are in the process of retroactively making some documents accessible. If you need assistance accessing an accessible version of this document, please reach out to the guidance@hhs.gov.
DISCLAIMER: The contents of this database lack the force and effect of law, except as authorized by law (including Medicare Advantage Rate Announcements and Advance Notices) or as specifically incorporated into a contract. The Department may not cite, use, or rely on any guidance that is not posted on the guidance repository, except to establish historical facts.