DHA Home About DHA Human Resources Contact Us FOIA Site Map
Skip Navigation LinksDHA Home > Clinical Operations and Patient Care > TMA Privacy Office > HIPAA > The Health Insurance Portability and Accountability Act (HIPAA) Security Rule
Infinite Menus, Copyright 2006, OpenCube Inc. All Rights Reserved.

The Health Insurance Portability and Accountability Act (HIPAA) Security Rule

The HIPAA Security program is driven by standards for the security of electronic protected health information to be implemented by covered entities under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HIPAA Security Rule, 45 CFR Parts 160 and 164. The Department of Defense (DoD) has implemented the HIPAA Security Rule under DoD 8580.02-R, DoD Health Information Security Regulation, July 12, 2007.

The HIPAA Security Program aims to ensure covered entities that "collect, maintain, use or transmit" electronic protected health information (ePHI) must implement "reasonable and appropriate administrative, physical and technical safeguards" that ensure integrity, availability and confidentiality. Such measures - notably in the form of policies and procedures - must provide protection against "any reasonably anticipated threats or hazards," ensure that the information is used and disclosed only as permitted by the Privacy Rule, and ensure that the covered entity's workforce complies with the Security rule.

“On October 1, 2013, the Department of Defense established the Defense Health Agency (DHA) to manage the activities of the Military Health System. These activities include those previously managed by TRICARE Management Activity (TMA), which was disestablished on the same date. During the next several months, all TMA websites will change to reflect the new DHA. We appreciate your patience during this transition."
DoD Seal
7700 Arlington Boulevard, Suite 5101, Falls Church, VA 22042-5101
The appearance of hyperlinks to external Web sites does not constitute endorsement by the TRICARE Management Activity of these Web sites or the information, products or services contained therein. For other than authorized government activities, TRICARE Management Activity does not exercise any editorial control over the information you may find at other locations. Such links are provided consistent with the stated purpose of this DoD Web site. Accessibility/Section 508