The “Modifications to the HIPAA Privacy, Security, Enforcement and Breach Notification Rules Under the HITECH Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules,” Volume 78, Federal Register, Jan. 25, 2013.

With respect to individually identifiable health information, the sharing, employment, application, utilization, examination, or analysis of such information within an entity that maintains such information.

PHI that is not rendered unusable, unreadable, or indecipherable to unauthorized persons through the use of a technology or methodology specified by the Secretary of HHS in guidance issued under Section 13402(h)(2) of Public Law 111-5.

With respect to a health plan, includes: Rules for, or determination of, eligibility (including enrollment and continued eligibility) for, or determination of, benefits under the plan, coverage, or policy (including changes in deductibles or other cost-sharing mechanisms in return for activities such as completing a health risk assessment or participating...

A mandate contained in law that compels an entity to make a use or disclosure of  protected health information and that is enforceable in a court of law. Includes, but is not limited to, court orders and court-ordered warrants; subpoenas or summons issued by a court, grand jury, a governmental or tribal inspector general, or an administrative body au...

One of the four types of publications published by the DHA taking the form of DHA-Procedural Instructions, DHA-Procedures Manuals, DHA-Interim Procedures Memorandums, and DHA-Administrative Instructions. DHA publications do not establish policy, they provide procedural guidance to implement policy from DOD issuances, federal law, or U.S.C.

Notes recorded, in any medium, by a health care provider who is a mental health professional documenting or analyzing the contents of conversation during a private, group, joint, or family counseling session and that are separated from the rest of the individual's medical record. Psychotherapy notes excludes medication prescription and monitoring, counsel...

An organized system of health care in which participating covered entities hold themselves out to the public as participating in a joint arrangement and participate in certain joint activities. The MHS and certain elements of the Coast Guard are a single organized health care arrangement.

Individually identifiable health information (as defined in the HIPAA Privacy Rule) that, except as provided in this issuance, is transmitted or maintained by electronic or any other form or medium. PHI excludes individually identifiable health information in employment records held by a DOD covered entity in its role as employer. Information that has bee...

In the place of a parent.

DOD issuances implementing the Privacy Act of 1974 in DOD.

In the case of a health plan administered by DOD, the DOD Component (or subcomponent) functions as the administrator of the health plan.  To the extent this issuance prescribes duties to be performed by covered entities, the term refers only to DOD covered entities.  All covered entities within the Military Health System (including both health p...

Records about an individual who is (or seeks or sought to become) a member of the uniformed services, employee of the U.S. Government, employee of a DOD contractor, or person with a comparable relationship to the DOD, that are maintained by a DOD Component or other entity subject to this issuance.  A more detailed definition is provided in DODM 6025....

All DOD health plans and all DOD health care providers that are, in the case of institutional providers, organized in accordance with the management authority of, or in the case of covered individual providers, assigned to or employed by, the DHA, the Surgeon General of the Army, the Surgeon General of the Navy, or the Surgeon General of the Air Force.

Those functions of a covered entity, the performance of which makes the entity a health plan or health care provider.