Under the Medicare Access and CHIP Reauthorization Act (MACRA), this final rule implements statutory requirements that expand the permissible uses of Medicare claims data that is obtained by qualified entities in accordance with applicable information, privacy, security and disclosure laws.  In doing so, this rule explains how qualified entities may create non-public analyses and provide or sell such analyses to authorized users, as well as how qualified entities may provide or sell combined data, or provide Medicare claims data alone at no cost, to certain authorized users.  This rule also implements certain privacy and security requirements and impose assessments on qualified entities in the case of a violation of a data use agreement.