Privacy Act and Health Insurance Portability and Accountability Act (HIPAA) training are required of all Defense Health Agency (DHA)
civilian, military, and contractor personnel as mandated by DoD 6025.18-R, "DoD Health Information Privacy Regulation,"
and OSD Memorandum 15041-07, "Safeguarding Against and Responding to the Breach of Personally Identifiable Information."
The DHA Privacy and Civil Liberties Office streamlined the mandatory Privacy Act and HIPAA training offerings by merging them into one course. The
merged course is accessible via MHS Learn. All workforce members are required to complete
Privacy Act and HIPAA training within 30 days of on-boarding and on an annual basis during their birth month.
Please refer to the attached instructions on accessing
MHS Learn, which includes instructions for creating an account to complete the required training.