TRICARE Online is a secure web portal designed to increase access to care for authorized TRICARE beneficiaries and increase access to information for designated TRICARE physicians and support staff.
Review the Security Disclaimer below for important information regarding the usage of this website. Clicking on the "I Agree" button confirms your agreement to the terms outlined, and allows you to view pre-logon information for this site.
We know that privacy and security of information matters to you. We respect your privacy and have taken measures to provide appropriate levels of security to protect your personal information. We will never release your name, street address, telephone number, e-mail address or any other personal information to unauthorized users. We deploy computer security technology to protect any information you provide to us. We may at times distribute aggregate (anonymous, collected statistical data) information about our users within the Department of Defense (DoD) and Military Health System for quality assurance and management.
Information contained in this system is subject to the Privacy Act of 1974 (5 U.S.C. 552a, as amended). Only authorized persons in the conduct of official business may use personal information contained in this system. Any unauthorized disclosure or misuse of personal information may result in criminal and/or civil penalties. Any official or employee may be found guilty of a misdemeanor and fined not more than $5,000.00 if he or she willfully discloses personal information to anyone not entitled to receive information. Any individual may file a civil action against a DoD component or its employees if the aggrieved individual feels that certain provisions of the Privacy Act have been violated. An aggrieved individual may obtain the payment of damage, court costs, and attorney fees in some cases.
TRICARE Online is a web site of the Military Health System. The Office of the Assistant Secretary of Defense, Health Affairs and the TRICARE Management Activity provides it as a public service. Information presented on this site is considered public information and may be distributed or copied unless otherwise indicated. Use of appropriate byline/photo/image credits is requested.
For site management, information is collected for statistical purposes. This government computer system uses software programs to create summary statistics, which are used for such purposes as assessing what information is of most and least interest, determining technical design specifications, and identifying system performance or problem areas. For site security purposes and to ensure that this service remains available to all users, this government computer system employs software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage. Except for authorized law enforcement investigations, no other attempts are made to identify individual users or their usage habits. Raw data logs are used for no other purposes and are scheduled for regular destruction in accordance with National Archives and Records Administration General Schedule 20. Unauthorized attempts to upload information or change information on this service are strictly prohibited and may be punishable under the Computer Fraud and Abuse Act of 1986 (Pub. L. 99-474, Oct. 16, 1986, 100 Stat. 1213). Department of Defense Security Notice and Consent Banner
TRICARE Online is a Department of Defense computer system. This computer system, including all related equipment, networks, and network devices (specifically including Internet access) are provided only for authorized U.S. government use. DoD computer systems may be monitored for all lawful purposes, including ensuring that their use is authorized, for management of the system, to facilitate protection against unauthorized access, and to verify security procedures, survivability, and operational security. Monitoring includes active attacks by authorized DoD entities to test or verify the security of this system. During monitoring, information may be examined, recorded, copied and used for authorized purposes. Authorized DoD personnel may monitor all information, including personal information, placed or sent over this system.
Use of this DoD computer system, authorized or unauthorized, constitutes consent to monitoring of this system. Unauthorized use may subject you to criminal prosecution. Evidence of unauthorized use collected during monitoring may be used for administrative, criminal, or civil action.
At all times, security maintenance and administration is an essential element of web site operation and maintenance. TRICARE Online employs several levels of security to protect the personal identifiable information of registered users. In addition, these security levels are anticipated to be in compliance with the Health Information Portability and Accountability Act of 1996 (HIPAA) (Pub. L. 104-191, Aug 21, 1996,110 Stat. 1936).
Eligibility Verification - In order to achieve the appropriate levels of security, the online registration process uses security software that takes the user's demographic data (i.e., date of birth, SS#, and name) and compares it to the data stored in the Defense Enrollment Eligibility Reporting System (DEERS). DEERS determines the user's eligibility for using certain features of TRICARE Online by making sure that the user is an eligible TRICARE beneficiary.
Secured Socket Layer (SSL) - A security protocol, which provides a transmission level of encryption between the user's browser and TRICARE Online server machines. SSL is a method for protecting a TRICARE Online user's identification and password.
Some states have restrictions on disclosure of health information to family members to protect the privacy of certain minors and dependent adult family members. These restrictions on disclosure of information may include accessing personal health and medical information through electronic or Internet based services. If you have questions regarding this matter, we recommend that you contact your local Military Treatment Facility for more information about disclosure of health information and applicable privacy laws within the state or jurisdiction that you and your family receive care.
You are always welcome to use TRICARE Online without registering or logging in. However, we require you to register and login for certain services, like making an appointment, customizing your web page, creating your personal health manager, using the claim, pharmacy renewal and enrollment features, or communicating electronically with your health care provider. When you use these features, we will clearly disclose what information is required and what information is optional. However, the information you provide is subject to the security and privacy measures described in this policy.
Cookies may be categorized as session or persistent, which describes the length of time that they stay on your system. The following are detailed descriptions of how we use these cookies.
Session Cookies A session cookie is a small piece of textual information that a server places temporarily on your browser during the time your browser is open. The cookies are erased once you close all browsers. We use session cookies in the following manner:
Log-on and log-off administration-If you register with our site, so as, for example, to use one of our online services, session cookies help with the log-on and log-off process. The cookies enable us to recognize your log-on ID when you log on so that we do not need to establish your identity for every request.
Transactions and site usability - We use session cookies to improve how you navigate through www.tricareonline.com and conduct transactions. As examples, session cookies are used to maintain your online session as you browse over several pages; to store and prepopulate information so that you do not have to reenter the same information twice.
Persistent Cookies
A persistent cookie is a small piece of text stored on your computer's hard drive for a defined period of time, after which the cookie is erased. TOL does not use persistent cookies.
When you register for a TRICARE Online account, access to your personal pages will be password protected. Choose your password that is easy for you to remember. For security purposes, you will be reminded that your password will need to be changed every 150 days. The password must contain at least fourteen (14) characters, with at least one numeric character, at least one capital and one lower case letters, and at least one special character. Your password may not contain spaces or your first name or last name. You will have three (3) chances to enter the correct password before you are locked out of the system for 60 minutes; during which you can choose to call the MHS helpdesk to have your account unlocked. We strongly recommend that you do not divulge your password to anyone.
TRICARE Online has links to many other federal agencies. In a few cases we link to private organizations, with their permission. Once you link to another site, you are subject to the privacy and security policy of the new site. When TRICARE Online links to external Internet sites, it does so by opening a new window (or browser) on your screen. Any information in these secondary windows (browsers) should be considered external to the TRICARE Online website, and TRICARE Online and the DoD are not responsible for its content.
To improve the quality of our service, TRICARE Online may use surveys, questionnaires and polls to facilitate feedback and input from our end users. When you respond to surveys, questionnaires or polls related to our site, we may, at times, ask you for demographic information such as your age or gender. This information is collected only as anonymous, aggregated information and is used for statistical purposes. Otherwise, we do not collect or store your personal responses.
This privacy and security policy may be revised periodically. When we make a significant change that affects our collection and use of your personal information or our security and privacy policy, we will post a notice on the TRICARE Online home page for thirty (30) days. The most recent changes to the security and or privacy policy will be highlighted in a different color within the policy. We recommend that you read the policy whenever you visit the TRICARE Online site in case you missed our notice or have not previously registered for a TRICARE Online service or feature.
TRICARE Online has partnered with select third parties to provide you with quality health information and a personalized medical record. We recommend that you read privacy and security policies of these third party partners before using their tools and services.
