These requirements support the privacy and security of patient information. CMS is taking additional steps to provide payers and patients opportunities and information to protect patient data and make informed decisions about sharing patient health information with third parties..