Enterprise Privacy Policy Engine (EPPE)

What is EPPE?

EPPE is the CMS system used to track disclosures of data containing Protected Health Information (PHI) or Personally Identifiable Information (PII).

Who should be using EPPE?

EPPE is currently open for use by CMS Contracting Officer Representatives (CORs) and contractors to manage Contractor Data Use Agreements (DUAs). CMS CORs and contractors must complete EPPE training before accessing the system to submit DUA actions. 

The process for submitting requests for all other DUA types remains unchanged. For more information, see: /Research-Statistics-Data-and-Systems/Files-for-Order/Data-Disclosures-Data-Agreements/Overview.

Where can I find information and training on Contractor DUAs?

All Contractor DUAs must be completed via EPPE. For information and training materials on how to process updates and extensions to existing DUAs as well as create new DUAs, please visit /Research-Statistics-Data-and-Systems/Files-for-Order/Data-Disclosures-Data-Agreements/DUA-Contractors

Who do I contact if I need help with EPPE?

If you need assistance with EPPE, please review the EPPE FAQs (PDF).  If you are unable to find the answer to your question, contact the EPPE Help Desk at 844-EPPE-DUA (844-377-3382) or EPPE@cms.hhs.gov


Page Last Modified:
08/23/2019 02:49 PM