Extensions and Closures

The Centers for Medicare & Medicaid Services (CMS) Data Use Agreements (DUAs) may only be approved for a period of up to one year. After one year, the DUA will expire unless the DUA requester either extends or closes the DUA. If a DUA for an organization expires, it is important to note that ALL open DUAs for that organization will be frozen. This means that no new DUAs or actions on existing DUAs (e.g., adding data or changing contacts) will be processed for any DUAs held by that organization until the expired DUA is either extended or closed. 

The DUA system will send the DUA contacts (requester, custodians, additional contacts and COR) notification e-mails at the following intervals, before the DUA expires: 60 days, 30 days, 15 days, and every day thereafter.

Please Note: For information on extending or closing a Research Identifiable File (RIF) DUA, please visit ResDAC’s Managing Your Project page.

Extending or Closing a Contractor DUA

CMS contractors are required to process DUA requests in EPPE. Please see the Contractor web page for instructions on how to extend/close DUAs.

Extending or Closing a Limited Data Set (LDS) DUA

LDS requesters are required to process DUA requests in EPPE. Please see the  LDS web page for instructions on how to extend/close DUAs.

Extending or Closing a Researcher DUA

For information on extending or closing a Research Identifiable File (RIF) DUA, please visit ResDAC’s Managing Your Project page.