Skip to main content
Find a Lawyer

Code of Federal Regulations Title 38. Pensions, Bonuses, and Veterans' Relief § 38.1.489 Audit and evaluation activities

Current as of January 02, 2025 | Updated by Findlaw Staff

Subject to the provisions of 38 U.S.C. 5701, 38 CFR 1.500–1.527, the Privacy Act (5 U.S.C. 552a), 38 CFR 1.575–1.584, and the following paragraphs, patient medical records covered by §§ 1.460 through 1.499 of this part may be disclosed outside VA for the purposes of conducting audit and evaluation activities.

(a) Records not copies. If patient records covered by §§ 1.460 through 1.499 of this part are not copied, patient identifying information may be disclosed in the course of a review of records on VA facility premises to any person who agrees in writing to comply with the limitations on redisclosure and use in paragraph (d) of this section and:

(1) Where audit or evaluation functions are performed by a State or Federal governmental agency on behalf of VA;  or

(2) Who is determined by the VA facility director to be qualified to conduct the audit or evaluation activities.

(b) Copying of records. Records containing patient identifying information may be copied by any person who:

(1) Agrees in writing to:

(i) Maintain the patient identifying information in accordance with the security requirements provided in § 1.466 of this part (or more stringent requirements);

(ii) Destroy all the patient identifying information upon completion of the audit or evaluation;  and

(iii) Comply with the limitations on disclosure and use in paragraph (d) of this section.

(2) The VA medical facility director determines to be qualified to conduct the audit or evaluation activities.

(c) Congressional oversight. Records subject to §§ 1.460 through 1.499 of this part upon written request may be released to congressional committees or subcommittees for program oversight and evaluation if such records pertain to any matter within the jurisdiction of such committee or subcommittee.

(d) Limitation on disclosure and use. Records containing patient identifying information disclosed under this section may be disclosed only back to VA and used only to carry out an audit or evaluation purpose, or, to investigate or prosecute criminal or other activities as authorized by a court order entered under § 1.494 of this part.

Previous Part of Code Next Part of Code
Back to Chapter List

Cite this article: FindLaw.com - Code of Federal Regulations Title 38. Pensions, Bonuses, and Veterans' Relief § 38.1.489 Audit and evaluation activities - last updated January 02, 2025 | https://codes.findlaw.com/cfr/title-38-pensions-bonuses-and-veterans-relief/cfr-sect-38-1-489/

FindLaw Codes may not reflect the most recent version of the law in your jurisdiction. Please verify the status of the code you are researching with the state legislature before relying on it for your legal needs.

Was this helpful?

Welcome to FindLaw's Cases & Codes

A free source of state and federal court opinions, state laws, and the United States Code. For more information about the legal concepts addressed by these cases and statutes, visit FindLaw’s Learn About the Law.

Go to Learn About the Law

Latest Blog Posts

For Legal Professionals

Learn About The Law

Get help with your legal needs

FindLaw’s Learn About the Law features thousands of informational articles to help you understand your options. And if you’re ready to hire an attorney, find one in your area who can help.

Go to Learn About the Law

Need to Find an Attorney?

Search our directory by legal issue

Enter information in one or both fields (Required)

Copied to clipboard