Back to Top Skip to main content Skip to sub-navigation

Privacy Act and HIPAA Privacy Training

The Health Insurance Portability and Accountability Act (HIPAA) and Privacy Act training is required of all Defense Health Agency (DHA) civilian, military, and contractor personnel.

The DHA Privacy and Civil Liberties Office (Privacy Office) is responsible for the development and availability of a merged course that offers specialized training unique to the Military Health System (MHS). These efforts are enhanced by promoting a culture of compliance through awareness, education, and outreach activities, including orientation sessions, annual seminars, and in-person training events.

The mandatory HIPAA and Privacy Act training course must be completed within 30 days of on-boarding and annually, thereafter. The course is accessible via Joint Knowledge Online (JKO).

JKO is a learning platform recently designated as the Enterprise Learning Management System (LMS), where other LMSs in use across the MHS were retired and transitioned to. JKO offers various training courses, including the mandatory HIPAA and Privacy Act training. Please refer to the Joint Knowledge Online (JKO) Instructions on accessing JKO.

New Workforce Members must self-register. Please note that a Common Access Card (CAC) is not required. Requests for assistance should be directed to the DHA Global Service Center:

Protected Health Information Management Tool (PHIMT)

The PHIMT is a Web-based application that assists in complying with the HIPAA Privacy Disclosure Accounting requirement. The training presentations below outline the functionality and responsibilities for each user role within the tool. If you do not currently have access to the PHIMT, please send an email message.

PHIMT User Manual


For assistance with PHIMT, please contact the Help Desk:

You also may be interested in...

Workforce Training Policy Pursuant to the Department of Defense Privacy Act Regulations and the Department of Defense Health Insurance Portability and Accountability Act Privacy and Security Regulations


This Memorandum establishes policy for the training of TRICARE Management Activity (TMA) workforce members in accordance with Department of Defense (DoD) 5400.11-R, “Department of Defense Privacy Program,” DoD 6025.18-R, “DoD Health Information Privacy Regulation,” and DoD 8580.02-R “DoD Health Information Security Regulation.”

Showing results 1 - 1 Page 1 of 1
Last Updated: March 08, 2022

DHA Address: 7700 Arlington Boulevard | Suite 5101 | Falls Church, VA | 22042-5101

Some documents are presented in Portable Document Format (PDF). A PDF reader is required for viewing. Download a PDF Reader or learn more about PDFs.