A written statement submitted to a DOD covered entity’s HIPAA privacy officer or to the HHS Office for Civil Rights alleging that the DOD covered entity has violated an individual's health information privacy rights or committed a violation of the HIPAA Privacy or Security Rule provisions.

The member of the workforce of a DOD covered entity or DOD Component who is the designated point of contact for the DOD covered entity or component for handling HIPAA privacy complaints. Such workforce member may be a member of a Military Service, a DOD civilian employee, or a contractor of the DOD covered entity or component. As stated in Paragraph 2.2.c...

The regulations issued by HHS pursuant to its authority to issue regulations on health information privacy, as provided by Section 264(c) of HIPAA. The HIPAA Rules, as amended by the Omnibus Final Rule, include the HIPAA Privacy Rule, the HIPAA Breach Rule, the HIPAA Security Rule, and the HIPAA Enforcement Rule.  The term HIPAA Rules does not i...

The person who is the subject of protected health information. Under certain circumstances, such as those in Paragraph 4.5.g. of DODM 6025.18, rights of an individual under this issuance may be exercised by a personal representative. 

A geographic area smaller than a State, such as a county, city, or town.

An officer or employee of any agency or authority of the United States (including an officer, employee, or designated member of a Military Service or other DOD Component), a State, a territory, a political subdivision of a State or territory, or an Indian tribe, who is empowered by law to: investigate or conduct an official inquiry into a potential v...

Except as provided below, a business associate, with respect to a DOD covered entity, is:

A person who, on behalf of such DOD covered entity or of an organized health care arrangement in which the DOD covered entity participates, but other than in the capacity of a member of the workforce of such DOD covered entity or arrangement, creates, receives, maint...

As defined in OMB Memorandum M-17-12, the loss of control, compromise, unauthorized disclosure, unauthorized acquisition, or any similar occurrence where: (1) a person other than an authorized user accesses or potentially accesses personally identifiable information; or (2) an authorized user accesses or potentially accesses personally identifiable inform...

Any penal or correctional facility, jail, reformatory, detention center, work farm, halfway house, or residential community program center operated by, or under contract to, the United States, a State, a territory, a political subdivision of a State or territory, or an Indian tribe, for the confinement or rehabilitation of persons charged with or convicte...

A health plan or a health care provider who transmits any health information in electronic form in connection with a standard transaction covered by this issuance. To the extent this issuance prescribes duties to be performed by covered entities, such duties apply only to DOD covered entities.

With respect to PHI created or received by a business associate in its capacity as the business associate of a covered entity, the combining of such PHI by the business associate with the PHI received by the business associate in its capacity as a business associate of another covered entity, to permit data analyses that relate to the health care operatio...

(1) The DOD Identification Number will replace the SSN as the Geneva Conventions Serial Number for the United States as all DOD identification cards are updated through their natural lifecycle replacement.

The DOD Identification Number is the common name for the Electronic Data Interchange Personal Identifier (EDI-PI).

(a) The E...

A group of federal agencies and non-federal organizations that have by agreement established an interoperable health information exchange to facilitate permissible uses and disclosures of PHI. Participating organizations mutually agree to support a common set of standards and specifications that enable the establishment of a secure, trusted, and interoper...

Electronic storage media on which data is or may be recorded electronically, including; hard drives, any removable or transportable digital memory medium, such as magnetic tape or disk, optical disk, or digital memory card, or transmission media used to exchange information already in electronic storage media. Transmission media include the Internet (wide...

Records that include health information and are maintained by a component of the DOD or other entity subject to this issuance; are about an individual who is (or seeks or sought to become) a member of the Uniformed Services, employee of the United States Government, employee of a DOD contractor, or person with a comparable relationship to the DOD; and are...