Skip to Main Content

Enterprise Privacy Policy Engine (EPPE)

Enterprise Privacy Policy Engine (EPPE)

What is the goal of EPPE?

The goal of EPPE is to standardize and automate the CMS Data Use Agreement (DUA) process and reduce the amount of time from request to retrieval.   As a result, the objective of the EPPE system is to transition from the current paper-based system to EPPE, an electronic information system designed to facilitate the DUA process and provide a traceable record of CMS data disclosures.  Part of this transition is the adoption of Remote Identity Proofing (RIDP) and Multi-Factor Authentication (MFA) services.  This transition will help improve CMS’ ability to reduce fraud and ensure system security.

How do I access EPPE?

EPPE is accessible through the CMS portal homepage at https://portal.cms.gov.

For detailed instructions on how to request access to EPPE, view the User Registration Process.  It includes the following topics:

  1. Creating an EIDM User ID
  2. Requesting Access to EPPE
  3. Logging into EPPE and Selecting a Role
  4. Awaiting Approval of the Role from the EPPE Administrator
  5. Accessing EPPE

The following roles are currently available in the system:

  • Requester (view only)
  • Data Entry (including Non-DUA Tracking Requests)
  • Contracting Officer’s Representative (COR)
  • Payment Coordinator
  • Extractor
  • Shipper
  • Administrator

What is available in EPPE?

The following types of disclosures are housed in EPPE:

  • Contractor DUAs
  • Researcher DUAs
  • Limited Data Sets (LDS)
  • Non-DUA Tracking Requests

How do I submit new DUA requests or updates to existing DUAs?

The process for submitting Contractor, LDS and Researcher DUA actions has not changed since the implementation of EPPE.  Please continue to follow the instructions outlined on the Privacy web pages at http://www.cms.gov/Research-Statistics-Data-and-Systems/Computer-Data-and-Systems/Privacy, and submit your actions to DataUseAgreement@cms.hhs.gov.

Who do I contact if I need help with EPPE?

View the EPPE FAQs.  If you are unable to find the answer to your question, contact the EPPE Help Desk at 844-EPPE-DUA (844-377-3382) or email EPPE@cms.hhs.gov

How can I stay informed about EPPE updates?

To receive email notification, please sign up for the EPPE GovDelivery Subscription here.