HIPAA

The TRICARE Management Activity Privacy and Civil Liberties Office manages a comprehensive privacy and security program.  The program ensures compliance with the HIPAA Privacy and Security Rules

The HIPAA Privacy and Security Rules are implemented within the Military Health System (MHS) by DoD 6025.18-R, "Department of Defense Health Information Privacy Regulation," January 24, 2003 and DoD 8580.02-R, "Department of Defense Health Information Security Regulation," July 12, 2007.

The Privacy Office supports the protection of health information and HIPAA Privacy Rule compliance by all MHS business processes, procedures, and systems that solicit, collect, access, use, disclose, and dispose of protected health information (PHI).

Through its HIPAA security program, the Privacy Office supports the protection of the confidentiality, integrity and availability of electronic PHI against any reasonably anticipated threats or hazards.

Privacy Office does not provide information on the Transactions, Code Sets and Identifiers requirements of HIPAA’s Administrative Simplification provisions. For these types of inquiries, please contact the TMA HIPAA Electronic Transactions, Code Sets and Identifiers Team at HIPAATSCIMail@tma.osd.mil.  

For more information, please visit:

 https://tricare.mil/Privacy/HIPAA.