Return to Search
Innovator Research FAQs
Guidance for Innovator Research FAQs Web Page
Issued by: Centers for Medicare & Medicaid Services (CMS)
Issue Date: January 01, 2020
Innovators and entrepreneurs may now access CMS data as part of a research study to create products or tools that they intend to sell or to conduct research to create analyses related to their own business needs. For example, an innovator could use CMS data to develop care management or predictive modeling tools.
Innovator researchers will be able to access CMS data only in the Virtual Research Data Center (VRDC). The VRDC is a virtual research environment for accessing and analyzing CMS data in a secure manner. The VRDC allows researchers to access and perform their own analysis and manipulation of CMS data virtually from their independent workstation. Researchers also have the ability to download aggregated reports and results to their own personal workstation.
Any entity is eligible to access CMS data under the innovator research policy if it submits the required materials and receives approval from CMS.
Innovator researchers will be able to access approved research identifiable files in the VRDC. However, innovator researchers will only be permitted to download aggregate, statistical information since no personally identifiable information or protected health information may be taken out of the VRDC.
Yes, the CMS data may only be used for the research purposes outlined within the researcher’s study protocol that has been reviewed and approved by an IRB and the CMS Privacy Board. In addition, innovator researchers will be required to provide information on the product, tool, or analyses that will be created using the Medicare data. This information undergoes an extensive review to ensure that the data is not used to exploit beneficiaries or to create fraud or abuse in the Medicare program. Finally, the CMS data may not be used for marketing purposes meaning the data may not be used for marketing to beneficiaries.
Yes, each innovator researcher is required to sign a data use agreement (DUA) with CMS that contains penalties for misuse of the data.
There are two levels of review for innovator research requests.
First, the research protocol is approved under the existing research request process. In order to receive approval to access data for research purposes, all researchers must submit a research request packet to CMS.
Second, there is an additional level of review that will focus on whether the product, tool or analyses could exploit beneficiaries or create the potential for fraud and/or abuse in CMS programs. To allow CMS to determine whether the proposed use of CMS data in a product, tool, or analyses is appropriate, innovator researchers are required to submit a request letter with details on:
- The product, tool, or analyses that will be created using the CMS data
- To whom the product or tool will be sold or how the analyses will be used
- An estimate of the number and frequency of aggregated data the researcher wishes to remove from the VRDC.
No, innovator research must be conducted in the VRDC.
Innovators are approved to receive 6 output reviews per week of up to 2GB. Multiple files may be downloaded but each file must be within the specified size limit.
The output review process is intended as a safeguard within the VRDC environment but in no way should be considered a certification or approval from CMS. VRDC users are responsible for assuring their output complies with the requirements detailed in the CMS DUA and that they adhere to the DUA requirements when publishing their study results.
HHS is committed to making its websites and documents accessible to the widest possible audience,
including individuals with disabilities. We are in the process of retroactively making some documents accessible.
If you need assistance accessing an accessible version of this document, please reach out to the guidance@hhs.gov.
DISCLAIMER: The contents of this database lack the force and effect of law, except as
authorized by law (including Medicare Advantage Rate Announcements and Advance Notices) or as specifically
incorporated into a contract. The Department may not cite, use, or rely on any guidance that is not posted
on the guidance repository, except to establish historical facts.