Skip main navigation

Military Health System

Clear Your Browser Cache

This website has recently undergone changes. Users finding unexpected concerns may care to clear their browser's cache to ensure a seamless experience.

Skip subpage navigation

HIPAA Compliance within the MHS

The Health Insurance Portability and Accountability Act applies to your protected health information. Your PHI is any information that:

  • Identifies you;
  • Is about your health or demographics;
  • Is maintained by a covered entity or business associate; and
  • Is related to your treatment, your medical condition, and the related payment for that condition as maintained by a covered entity or business associate.

The DHA Privacy and Civil Liberties Office helps the Military Health System comply with the following HIPAA Rules:

  • The HIPAA Privacy Rule defines how your PHI should be safeguarded, limits when it can be used and disclosed without your authorization, and ultimately gives you some control over your own PHI.
  • The HIPAA Security Rule defines how your PHI should be protected and transferred when maintained electronically. 
  • The HIPAA Breach Notification Rule defines when your PHI has been inappropriately used or disclosed (see Breaches of PII and PHI page) and describes the breach response obligations of a covered entity.

The Chief of the DHA Privacy Office is the appointed HIPAA Privacy Officer and HIPAA Security Officer, and has authority over the HIPAA Privacy and Security programs at DHA.

For more information DHA’s HIPAA compliance program, please read the DHA’s HIPAA Privacy and HIPAA Security Core Tenets Policy Statement.

You also may be interested in...

Policy
Mar 13, 2019

Instruction: #DODI 6025.18, Health Insurance Portability and Accountability Act Privacy Rule Compliance in DOD Health Care Programs

This issuance, in accordance with the authority in DOD Directive 5124.02, establishes policy and assigns responsibilities for DOD compliance with federal law governing health information privacy and breach of privacy; integrating health information privacy and breach compliance with general information privacy and security requirements in accordance ...

  • Identification #: DODI 6025.18
  • Type: Instruction
Fact Sheet
May 14, 2014

General Mapping of HIPAA Security Rule to Existing DOD Policies and IA Controls

.PDF | 703.77 KB

This document represents an updated mapping of the HIPAA Security Rule to select DOD policies and IA controls. It does not constitute the rendering of legal advice or an exhaustive list of all possible mappings of the Security Rule to DOD policies or IA controls. The document is intended to provide general information and to allow different ...

Policy
May 1, 2014

Federal Regulation: Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules (45 C.F.R. Parts 160 and 164)

The HIPAA Privacy Rule establishes national standards to protect individuals’ medical records and other personal health information and applies to health plans, health care clearinghouses, and those health care providers that conduct certain health care transactions electronically. The HIPAA Security Rule establishes national standards to protect ...

  • Identification #: N/A
  • Type: Federal Regulation
Policy
Mar 14, 2014

Memorandum of Understanding: DOD/Veterans Affairs Sharing

.PDF | 5.79 MB

This MOU establishes a framework governing inter-Departmental transfer of PIII/PHI of beneficiaries who receive health care and/or other benefits from either Department. This MOU revises the MOU on "Defining Data-Sharing Between the Departments," executed in May and June of 2005.

  • Identification #: N/A
  • Type: Memorandum of Understanding
Publication
Oct 1, 2013

MHS Notice of Privacy Practices (NoPP) - Brochure - Print-Ready Version - Spanish - Latin American

.PDF | 294.39 KB

The MHS Notice of Privacy Practices (NoPP) describes how medical information about you may be used and disclosed and how you can get access to this information. This is a print-ready, portrait version of the brochure in Spanish - Latin American, measuring 8.5” x 11” (vertical).

Publication
Oct 1, 2013

MHS Notice of Privacy Practices (NoPP) - Brochure - Print-Ready Version - Vietnamese

.PDF | 377.00 KB

The MHS Notice of Privacy Practices (NoPP) describes how medical information about you may be used and disclosed and how you can get access to this information. This is a print-ready, portrait version of the brochure in Vietnamese, measuring 8.5” x 11” (vertical).

Publication
Oct 1, 2013

MHS Notice of Privacy Practices (NoPP) - Brochure - Print-Ready Version - Portuguese - Brazilian

.PDF | 301.45 KB

The MHS Notice of Privacy Practices (NoPP) describes how medical information about you may be used and disclosed and how you can get access to this information. This is a print-ready, portrait version of the brochure in Portuguese - Brazilian, measuring 8.5” x 11” (vertical).

Last Updated: June 05, 2024
Follow us on Instagram Follow us on LinkedIn Follow us on Facebook Follow us on X Follow us on YouTube Sign up on GovDelivery