Data Use Agreement – The Privacy Act of 1974 requires the Centers for Medicare & Medicaid Services (CMS) to account for all disclosures of personally identifiable information (PII). CMS uses the DUA to account for all such disclosures.
Further reading –