June 29th is almost here (sighs of relief, anyone?), and it is time to start deleting the data. Some of what needs to be deleted is pretty clear, (e.g. the original CMS files, the extracted SAS data and certainly all of the reports 6 and 7 were derived from the data). It is a little unclear to me though, whether reports one through five need to be deleted. If the data is aggregate, with n>10, and no individuals are identifiable, can we keep those? I'm thinking Reports one and two in particular. Any thoughts or guidance on that issue?
Also, I see that we have to notify CMS of the destruction of the data. Is there a specific form or process that we need to follow, or do I just send a letter saying I've deleted the data? How are people handling that when they've worked with a consultant who may also have copies of the data, are you asking your consultants to send separate notification?
Thanks everyone.
Susan