One of the following: For a health plan established or regulated by federal law, State is defined in the applicable section of the U.S.C. for such health plan. For all other purposes, State is defined as any of the 50 States, the District of Columbia, the Commonwealth of Puerto Rico, the Virgin Islands, Guam, American Samoa, and the Commonwealth of the No...

A health plan, or a health care provider who transmits any health information in electronic form in connection with a standard transaction pursuant to Part 162 of Title 45, Code of Federal Regulations.  A more detailed definition is provided in DODM 6025.18.

Individually identifiable health information that is transmitted or maintained by electronic or any other form or medium. PHI excludes individually identifiable health information in employment records held by a DOD covered entity in its role as employer. Information which has been de-identified in accordance with Paragraph 4.5.a is not PHI. PHI is a subs...

Each authority of the U.S. Government, whether or not it is within or subject to review by another agency.

Federal agency or any unit of State or local government.

Any of the following activities of the covered entity to the extent that the activities are related to covered functions: Conducting quality assessment and improvement activities, including outcomes evaluation and development of clinical guidelines, if obtaining general knowledge is not the primary purpose of any studies resulting from such activitie...

The rules and instructions issued by HHS pursuant to Section 264(c) of HIPAA and captioned the HIPAA Privacy, Security, Breach, and Enforcement Rules (see the References). This term does not include the HIPAA transaction, code set, and identifier rules in Part 162 of Title 45, Code of Federal Regulations.

The HIPAA Rule governing the use and disclosure of PHI held by covered entities and business associates.

Any information, including genetic information, in any form or medium, that: Is created or received by a health care provider, health plan, public health authority, employer, life insurer, or school or university. Relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual;...

Current DOD issuances and other federal law relating to electronic data security and protection of DOD information systems.  A more detailed definition is provided in DODM 6025.18.

An agency or authority of the United States, a State, territory, political subdivision of State or territory, Indian tribe, or person or entity acting under a grant of authority from or contract with such public agency, including the employees or agents of such public agency or its contractors or persons or entities to whom it has granted authority, that ...

Any DOD program that provides or pays the cost of health care, unless exempted under this definition of health plan. The following components of the TRICARE Program are a health plan under this issuance

• The program that provides health care under the authori...

The member of the workforce of a DOD covered entity or DOD Component who is the designated point of contact for the DOD covered entity or component for handling HIPAA privacy complaints. Such workforce member may be a member of a Military Service, a DOD civilian employee, or a contractor of the DOD covered entity or component. As stated in Paragraph 2.2.c...

The regulations issued by HHS pursuant to its authority to issue regulations on health information privacy, as provided by Section 264(c) of HIPAA. The HIPAA Rules, as amended by the Omnibus Final Rule, include the HIPAA Privacy Rule, the HIPAA Breach Rule, the HIPAA Security Rule, and the HIPAA Enforcement Rule.  The term HIPAA Rules does not i...

An officer or employee of any agency or authority of the United States (including an officer, employee, or designated member of a Military Service or other DOD Component), a State, a territory, a political subdivision of a State or territory, or an Indian tribe, who is empowered by law to: investigate or conduct an official inquiry into a potential v...