Back to Top Skip to main content

How HIPAA Protects You

The Health Insurance Portability and Accountability Act (HIPAA) is designed to balance privacy, efficiency, and quality. A covered entity generally does not need your permission to share your protected health information (PHI) with another covered entity for treatment, payment, or healthcare operations, commonly referred to as TPO. For example, a doctor will generally not ask your permission before:

  • Sending your records to a second doctor for a second opinion (treatment);
  • Consulting with another health care provider regarding your medical status (treatment);
  • Asking TRICARE for reimbursement for the services you received (payment);
  • Sharing medical services provided for coverage and justification of charges (payment);
  • Reviewing your records to conduct MHS provider training programs, including certification and licensing (health care operations); and
  • Reviewing your records to see if your doctor followed protocol (health care operations).

However, HIPAA does give you the right to:

  • Learn how the Military Health System (MHS) will use and disclose your PHI;
  • Request to limit who can access your PHI;
  • Find out when a covered entity discloses your PHI to others;
  • Request to view and receive a copy of your PHI; and
  • Request to amend your PHI if incorrect or incomplete.

HIPAA also requires the MHS to:

  • Make sure your PHI is stored securely if maintained electronically;
  • Make sure your PHI is available when you need healthcare; and
  • Notify you if your PHI is lost or stolen.

You also may be interested in...

Health Information Privacy HIPAA Complaint Form

Form/Template
11/3/2014

The Health Information Privacy HIPAA Complaint Form is used by DHA to proceed with a complaint. DHA uses the information provided to determine if DHA has jurisdiction and, if so, how to process your complaint.

Recommended Content:

How HIPAA Protects You | HIPAA Compliance within the MHS

MHS NoPP Acknowledgement Form

Form/Template
10/1/2013

The MHS Notice of Privacy Practices (NoPP) describes how medical information about you may be used and disclosed and how you can get access to this information. This form serves as an acknowledgement to patients and beneficiaries that they have received the MHS NoPP. The template is sized to scale and can be reproduced locally on Avery Label #5163, 5263, 2163, 5923, 5963 (size: 2 inches x 4 inches).

Recommended Content:

How HIPAA Protects You | HIPAA Compliance within the MHS | Notice of Privacy Practices
Showing results 1 - 2 Page 1 of 1

DHA Address: 7700 Arlington Boulevard | Suite 5101 | Falls Church, VA | 22042-5101

Some documents are presented in Portable Document Format (PDF). A PDF reader is required for viewing. Download a PDF Reader or learn more about PDFs.