Privacy and Civil Liberties

Research Repository Template

This template is designed to assist the Department of Defense Institutional Review Board with determining if DHA data disclosed to a research study will, in any form (de-identified or otherwise), be placed in a research repository and, if so, the type of data and whether any Health Insurance Portability and Accountability Act (HIPAA) compliance requirements are applicable.

IRB Findings Document

The IRB HIPAA Compliance Review Findings on Data Requests.

Research Repository Template

The RRT asks researchers whether they intend to put data into a repository, and if yes, what data and under what governance terms.

List of Systems Containing DHA Data

5 Tips for Better Data Privacy

Your privacy matters! Don’t be a target of data theft. Protect what’s yours by following these easy steps.

DHA Privacy Office Standard Contract Language

This Section addresses the Contractor’s requirements under The Privacy Act of 1974 (Privacy Act), The Freedom of Information Act (FOIA), and The Health Insurance Privacy and Accountability Act (HIPAA) as set forth in applicable statutes, implementing regulations and DoD issuances.

PGI 224.1-90: Personally Identifiable Information (PII), Protected Health Information (PHI), and Federal Information Requirements

This PGI provides standard language that shall be included in all purchased and non-purchased care solicitations and contracts where the contractor’s performance involves access to PII/PHI (unless those solicitations and contracts incorporate the TRICARE Manuals in their entirety, in which case this PGI does not apply).

• Identification #: N/A
• Date: 10/27/2020
• Type: Guidelines
• Topics: Privacy and Civil Liberties | DHA Privacy Contract Language

Privacy Program Plan

The DHA Privacy Office has developed this PPP to present its strategic concept of operations, including descriptions of how DHA complies with federal privacy requirements and related information management subject areas. This DHA PPP formally documents the DHA’s Privacy Program, including a description of the structure of the Privacy Program, the subject programs and activities that comprise the program, the roles and responsibilities of privacy officials and staff, the strategic goals and objectives of the Privacy Program, and the controls in place or planned – such as policies and procedures and specific programs and activities for meeting applicable privacy requirements and managing privacy risks. Privacy Program Plan

DoD Manual 6025.18-Implementation of the HIPAA Privacy Rule in DoD Health Care Programs

This issuance, in accordance with the authority in DoD Directive 5124.02, establishes policy and assigns responsibilities for; DoD compliance with federal law governing health information privacy and breach of privacy; Integrating health information privacy and breach compliance with general information privacy and security requirements in accordance with federal law and DoD issuances; Health information technology, system interoperability, and exchange of electronic health information, in relation to federal law governing health information privacy and breach; and DoD contracting and procurement activities in relation to federal law governing health information privacy and breach.

• Identification #: 6025.18
• Date: 3/13/2019
• Type: Instructions
• Topics: How HIPAA Protects You | HIPAA Compliance within the MHS | Submit a Data Sharing Application | Privacy and Civil Liberties

Implementation of the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule in DoD Health Care Programs

This 6025.18 DoD Manual was issued in accordance with the authority in DoD Directive 5124.02. It also implements the policy in DoD Instruction (DoDI) 6025.18, and assigns responsibilities and procedural standards for protecting personally identifiable health information in accordance with parts 160 and 164 of title 45, Code of Federal Regulations (CFR).

• Identification #: 6025.18
• Date: 3/13/2019
• Type: Memorandums
• Topics: How HIPAA Protects You | HIPAA Compliance within the MHS | Submit a Data Sharing Application | Privacy and Civil Liberties

DHA Standard Contract Language

This Section addresses the Contractor’s requirements under The Privacy Act of 1974 (Privacy Act), The Freedom of Information Act (FOIA), and The Health Insurance Privacy and Accountability Act (HIPAA) as set forth in applicable statutes, implementing regulations and DoD issuances.

• Identification #: N/A
• Date: 7/6/2017
• Type: Guidelines
• Topics: DHA Privacy Contract Language | Privacy and Civil Liberties

Surgical Scheduling System

PIA summary for Surgical Scheduling System.

Decision Tree Matrix for Contracts with PII/PHI

Personally Identifiable Information (PII), Protected Health Information (PHI), and Federal Information Requirements

Zeiss FORUM

Zeiss FORUM PIA summary

Department of Defense Consolidated Cancer Registry (CCR)

Department of Defense Consolidated Cancer Registry (CCR) System PIA summary