A DHA publication.

The Manual for Courts-Martial or other issuance of the President applicable to the Armed Forces.

A Military Department or Military Service regulation or issuance of the Chairman of the Joint Chiefs of Staff to the extent the DHA Privacy Office determines is consistent with the policies and procedures of this manual. 

With respect to individually identifiable health information, the sharing, employment, application, utilization, examination, or analysis of such information within an entity that maintains such information.

One of the four types of publications published by the DHA taking the form of DHA-Procedural Instructions, DHA-Procedures Manuals, DHA-Interim Procedures Memorandums, and DHA-Administrative Instructions. DHA publications do not establish policy, they provide procedural guidance to implement policy from DOD issuances, federal law, or U.S.C.

With respect to a health plan, includes: Rules for, or determination of, eligibility (including enrollment and continued eligibility) for, or determination of, benefits under the plan, coverage, or policy (including changes in deductibles or other cost-sharing mechanisms in return for activities such as completing a health risk assessment or participating...

An organized system of health care in which participating covered entities hold themselves out to the public as participating in a joint arrangement and participate in certain joint activities. The MHS and certain elements of the Coast Guard are a single organized health care arrangement.

A federal statute, codified in Section 552a of Title 5, U.S.C., that, among other things, protects the confidentiality of federal records maintained on individuals. In contrast to HIPAA, applicability of the Privacy Act is limited to the federal government.

Notes recorded, in any medium, by a health care provider who is a mental health professional documenting or analyzing the contents of conversation during a private, group, joint, or family counseling session and that are separated from the rest of the individual's medical record. Psychotherapy notes excludes medication prescription and monitoring, counsel...

A mandate contained in law that compels an entity to make a use or disclosure of  protected health information and that is enforceable in a court of law. Includes, but is not limited to, court orders and court-ordered warrants; subpoenas or summons issued by a court, grand jury, a governmental or tribal inspector general, or an administrative body au...

Those functions of a covered entity, the performance of which makes the entity a health plan or health care provider.

An agency or authority of the United States, a State, territory, political subdivision of State or territory, Indian tribe, or person or entity acting under a grant of authority from or contract with such public agency, including the employees or agents of such public agency or its contractors or persons or entities to whom it has granted authority, that ...

PHI that is not rendered unusable, unreadable, or indecipherable to unauthorized persons through the use of a technology or methodology specified by the Secretary of HHS in guidance issued under Section 13402(h)(2) of Public Law 111-5.

One of the following: For a health plan established or regulated by federal law, State is defined in the applicable section of the U.S.C. for such health plan. For all other purposes, State is defined as any of the 50 States, the District of Columbia, the Commonwealth of Puerto Rico, the Virgin Islands, Guam, American Samoa, and the Commonwealth of the No...

DOD issuances implementing the Privacy Act of 1974 in DOD.

Individually identifiable health information (as defined in the HIPAA Privacy Rule) that, except as provided in this issuance, is transmitted or maintained by electronic or any other form or medium. PHI excludes individually identifiable health information in employment records held by a DOD covered entity in its role as employer. Information that has bee...

With respect to a DOD covered entity, a party that creates, receives, maintains, or transmits PHI on behalf of the DOD covered entity for a function or activity regulated by this issuance; or a party that provides legal, actuarial, accounting, consulting, data aggregation, management, administrative, accreditation, or financial services to or for such DOD...