Code of Federal Regulations Title 42. Public Health § 42.431.305 Types of information to be safeguarded

(1) Names and addresses;

(2) Medical services provided;

(3) Social and economic conditions or circumstances;

(4) Agency evaluation of personal information;

(5) Medical data, including diagnosis and past history of disease or disability;  and

(6) Any information received for verifying income eligibility and amount of medical assistance payments (see § 435.940 through § 435.965 of this subchapter). Income information received from SSA or the Internal Revenue Service must be safeguarded according to the requirements of the agency that furnished the data, including section 6103 of the Internal Revenue Code, as applicable.

(7) Any information received in connection with the identification of legally liable third party resources under § 433.138 of this chapter.

(8) Social Security Numbers.