Every day, millions of Americans trust CMS with their sensitive data, such as Personally Identifiable Information (PII) and Protected Health Information (PHI). We take the privacy and protection of that data very seriously by following fair information practices – like collecting only the data that’s necessary for a function or service, sharing it only with people who need to know, and being transparent about what information we collect.

The documents, tools, and resources on this page will help you comply with privacy-related requirements and follow best practices for FISMA systems at CMS. If you have questions about the privacy implications of a specific action or change, you can also contact the Privacy Office on this page. Working together, we can keep beneficiary information safe and secure.