The member of the workforce of a DOD covered entity or DOD Component who is the designated point of contact for the DOD covered entity or component for handling HIPAA privacy complaints. Such workforce member may be a member of a Military Service, a DOD civilian employee, or a contractor of the DOD covered entity or component. As stated in Paragraph 2.2.c...

A breach as defined in Section 164.402 of the HIPAA Breach Rule. The text of that HHS definition states:

Breach means the acquisition, access, use, or disclosure of PHI in a manner not permitted under subpart E of this part [i.e. the HIPAA Privacy Rule] which compromises the security or privacy of the PHI. HHS breach excludes: Any unintentional acquisitio...

The regulations issued by HHS pursuant to its authority to issue regulations on health information privacy, as provided by Section 264(c) of HIPAA. The HIPAA Rules, as amended by the Omnibus Final Rule, include the HIPAA Privacy Rule, the HIPAA Breach Rule, the HIPAA Security Rule, and the HIPAA Enforcement Rule.  The term HIPAA Rules does not i...

The person who is the subject of protected health information. Under certain circumstances, such as those in Paragraph 4.5.g. of DODM 6025.18, rights of an individual under this issuance may be exercised by a personal representative. 

A geographic area smaller than a State, such as a county, city, or town.

An officer or employee of any agency or authority of the United States (including an officer, employee, or designated member of a Military Service or other DOD Component), a State, a territory, a political subdivision of a State or territory, or an Indian tribe, who is empowered by law to: investigate or conduct an official inquiry into a potential v...

As defined in OMB Memorandum M-17-12, the loss of control, compromise, unauthorized disclosure, unauthorized acquisition, or any similar occurrence where: (1) a person other than an authorized user accesses or potentially accesses personally identifiable information; or (2) an authorized user accesses or potentially accesses personally identifiable inform...

Except as provided below, a business associate, with respect to a DOD covered entity, is:

A person who, on behalf of such DOD covered entity or of an organized health care arrangement in which the DOD covered entity participates, but other than in the capacity of a member of the workforce of such DOD covered entity or arrangement, creates, receives, maint...

Any penal or correctional facility, jail, reformatory, detention center, work farm, halfway house, or residential community program center operated by, or under contract to, the United States, a State, a territory, a political subdivision of a State or territory, or an Indian tribe, for the confinement or rehabilitation of persons charged with or convicte...

A health plan or a health care provider who transmits any health information in electronic form in connection with a standard transaction covered by this issuance. To the extent this issuance prescribes duties to be performed by covered entities, such duties apply only to DOD covered entities.

With respect to PHI created or received by a business associate in its capacity as the business associate of a covered entity, the combining of such PHI by the business associate with the PHI received by the business associate in its capacity as a business associate of another covered entity, to permit data analyses that relate to the health care operatio...

A group of federal agencies and non-federal organizations that have by agreement established an interoperable health information exchange to facilitate permissible uses and disclosures of PHI. Participating organizations mutually agree to support a common set of standards and specifications that enable the establishment of a secure, trusted, and interoper...

Electronic storage media on which data is or may be recorded electronically, including; hard drives, any removable or transportable digital memory medium, such as magnetic tape or disk, optical disk, or digital memory card, or transmission media used to exchange information already in electronic storage media. Transmission media include the Internet (wide...

(1) The DOD Identification Number will replace the SSN as the Geneva Conventions Serial Number for the United States as all DOD identification cards are updated through their natural lifecycle replacement.

The DOD Identification Number is the common name for the Electronic Data Interchange Personal Identifier (EDI-PI).

(a) The E...

Information used to distinguish or trace an individual’s identity, such as name, social security number, date and place of birth, mother’s maiden name, biometric records, home phone numbers, other demographic, personnel, medical, and financial information.  PII includes any information that is linked or linkable to a specified individual,...