Notice: As a result of increases in the Health Protection Condition (HPCON) level, our offices are limited to mission-essential personnel only and maximizing the use of telework for other personnel. This means that we are unable to handle requests sent via traditional methods such as postal mail. During this time, we can only respond to electronic inquiries while under elevated HPCON levels and request that when sending information to the DHA Privacy and Civil Liberties Office or the DHA Freedom of Information Act Service Center, please use the following addresses DHA.PrivacyOfficeMail@mail.mil or DHA.FOIA@mail.mil.
Please refrain from sending personally identifiable information or health related information as these mailboxes do not allow for your encrypted submission. However, in an abundance of caution, you may use the DoD SAFE (Secure Access File Exchange) via https://safe.apps.mil/ to upload and send your personal information. Please reference the above mailbox addresses for your submission. When using SAFE, we request that any personal information being transmitted must be encrypted prior to uploading and the decryption key must then be provided to the recipient(s) by a means other than SAFE.
Thank you for your understanding during this time. We will update our webpage when we return to normal operations.
The DHA Privacy and Civil Liberties Office is responsible for safeguarding Military Health System (MHS) individuals and information by administering compliance programs. In this section of the site, you can find information about several important programs and functions, including:
Protection of personally identifiable and protected health information (PII/PHI) serves eligible beneficiaries, human research subjects, and the DHA workforce.
You also may be interested in...
Form/Template
10/27/2020
This Section addresses the Contractor’s requirements under The Privacy Act of 1974 (Privacy Act), The Freedom of Information Act (FOIA), and The Health Insurance Privacy and Accountability Act (HIPAA) as set forth in applicable statutes, implementing regulations and DoD issuances.
Recommended Content:
Privacy and Civil Liberties | DHA Privacy Contract Language
Policy
This PGI provides standard language that shall be included in all purchased and non-purchased care solicitations and contracts where the contractor’s performance involves access to PII/PHI (unless those solicitations and contracts incorporate the TRICARE Manuals in their entirety, in which case this PGI does not apply).
Publication
11/29/2019
The DHA Privacy Office has developed this PPP to present its strategic concept of operations, including descriptions of how DHA complies with federal privacy requirements and related information management subject areas.
This DHA PPP formally documents the DHA’s Privacy Program, including a description of the structure of the Privacy Program, the subject programs and activities that comprise the program, the roles and responsibilities of privacy officials and staff, the strategic goals and objectives of the Privacy Program, and the controls in place or planned – such as policies and procedures and specific programs and activities for meeting applicable privacy requirements and managing privacy risks.
Privacy Program Plan
Recommended Content:
Privacy and Civil Liberties
Policy
This issuance, in accordance with the authority in DoD Directive 5124.02, establishes policy and assigns responsibilities for; DoD compliance with federal law governing health information privacy and breach of privacy; Integrating health information privacy and breach compliance with general information privacy and security requirements in accordance with federal law and DoD issuances; Health information technology, system interoperability, and exchange of electronic health information, in relation to federal law governing health information privacy and breach; and DoD contracting and procurement activities in relation to federal law governing health information privacy and breach.
Policy
This 6025.18 DoD Manual was issued in accordance with the authority in DoD Directive 5124.02. It also implements the policy in DoD Instruction (DoDI) 6025.18, and assigns responsibilities and procedural standards for protecting personally identifiable health information in accordance with parts 160 and 164 of title 45, Code of Federal Regulations (CFR).
Policy
This Section addresses the Contractor’s requirements under The Privacy Act of 1974 (Privacy
Act), The Freedom of Information Act (FOIA), and The Health Insurance Privacy and Accountability Act (HIPAA) as set forth in applicable statutes, implementing regulations and DoD issuances.
Form/Template
3/31/2016
The purpose of the PTA is to identify if a system contains personally identifiable information (PII); and determine whether a Privacy Impact Assessment (PIA) is required, whether a System of Records Notice (SORN) is required, and if any other privacy requirements apply to the information system.
Recommended Content:
Privacy Impact Assessments | Privacy and Civil Liberties
Policy
This instruction establishes policy and assigns responsibilities for security of individually identifiable health information created, received, maintained, or transmitted in electronic form (referred to in this instruction as “electronic protected health information (ePHI)”).
Showing results 1 - 15
Page 1 of 1