SYSTEM OF RECORDS NOTICES (SORNs)

DoD-Wide Notices

SYSTEM NAME:

Health Affairs Survey and Study Data Base (April 29, 2010, 75 FR 22565).

SYSTEM LOCATION:

Office of the Assistant Secretary of Defense (Health Affairs), TRICARE Management Activity Health Program Analysis and Evaluation, Suite 810, 5111 Leesburg Pike, Skyline Building 5, Falls Church, Virginia 22041-3206.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

Uniformed services beneficiaries enrolled in the Defense Eligibility Enrollment Reporting System who are eligible for medical and dental health care; veterans and their dependents; individuals who submit Medicare and/or Medicaid claims and linked to DoD health care; DoD civilian employees and contractor personnel including contracted providers, and health care workers.

CATEGORIES OF RECORDS IN THE SYSTEM:

Records in the system include name, address, sponsor and dependents Social Security Number (SSN), family member prefix code, demographics categories that include age, sex, date of birth, telephone number, e-mail address, military rank group officer and enlisted or civilian.

Personal health information and clinical encounter data regarding interactions with health care systems such as diagnoses, procedures, treatments, services, and benefits; self-reported health and health related response datasets such as surveys and focus groups; health care administrative data, such as inpatient, dental, outpatient, and pharmacy utilization rates; budgetary and managerial cost accounting data, such as claims processing, direct and purchased care workload and costs; contingency tracking system data such as deployment status; and health plan eligibility and enrollment data.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

10 U.S.C. 136, Under Secretary of Defense for Personnel and Readiness; 10 U.S.C. 1071 (NOTE), Annual Beneficiary Survey; 10 U.S.C. Chapter 55, Medical and Dental Care; 42 U.S.C. 11131-11152, Health Care Improvement Act of 1986; 32 C.F.R. 199.17, TRICARE program; 45 C.F.R. Parts 160 and 164, General Administrative Requirements and Security and Privacy; DoDD 3216.2, Protection of Human Subjects and Adherence to Ethical Standards in DoD-Supported Research; DoDD 6025.13, Medical Quality Assurance (MQA) in the Military Health System (MHS); and E.O. 9397 (SSN), as amended.

PURPOSE(S):

To collect, assemble, interpret, analyze, report and publish surveys; research, study, statistical and informational data, in order to improve the quality of DoD health care and the health status, welfare and well-being of the DoD beneficiary population. Uses of identifiable data include primary analysis; secondary analysis; non-response analysis; and cross-mapping analysis. Results will only be reported in the aggregate.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

In addition to those disclosures generally permitted under 5 U.S.C. 552a(b) of the Privacy Act of 1974, these records may specifically be disclosed outside the DoD as a routine use pursuant to 5 U.S.C. 552a(b)(3) as follows:

• To the Department of Health and Human Services and/or the Department of Veterans Affairs consistent with their statutory administrative responsibilities pursuant to 10 U.S.C. Chapter 55, Medical and Dental Care, and 38 U.S.C 613, Judiciary and Judicial Procedure.
• To the Office of Personnel Management for purposes related to DoD Federal employees and/or their health care benefits in DoD.
• The Department frequently contracts with a private firm for the purpose of conducting surveys or studies and in collecting, analyzing, aggregating, otherwise refining, or evaluating data in this system. Relevant records are disclosed to such contractors. Contractors must maintain Privacy Act of 1974, Health Insurance Portability and Accountability Act of 1996 Privacy and Security Rule training, and observe all required and related safeguards with respect to such records as required by DoD 5400.11-R, Department of Defense Privacy Program, and DoD 6025.18-R, Department of Defense Health Information Privacy Regulation.
• To State Departments of Health for health care delivery programs, where such programs effect benefits determinations between these Department-level programs, continuity of clinical care, or effect payment for care between Departmental programs inclusive of care provided by commercial entities under contract to these three Departments.
• To Academia, non profit and commercial entities, for surveys or research, where such releases are consistent with the mission of the Military Health System and where exchange and coordination of information and data are consistent with the Privacy Act of 1974, the Heath Insurance Portability and Accountability Act of 1996 Privacy and Security Rules, and applicable DoD Information Security regulations.

The DoD Blanket Routine Uses set forth at the beginning of the Office of the Secretary of Defense compilation of systems of records notices apply to this system with the following noted exceptions:

NOTE: This system of records contains individually identifiable health information. The DoD Health Information Privacy Regulation, DoD 6025.18-R issued pursuant to the Health Insurance Portability and Accountability Act of 1996, applies to most health information. DoD 6025.18-R may place additional procedural requirements on the uses and disclosures of such information beyond those found in the Privacy Act of 1974 or mentioned in this system of records notice.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Paper and/or electronic storage media.

RETRIEVABILITY:

Records of beneficiaries may be retrieved by patient identifiers, such as name, address, sponsor and dependents Social Security Number (SSN), family member prefix code, and demographic categories, such as age, sex, e-mail address, military rank group officer, enlisted, or civilian.

Safeguards:

Media, data and/or records are maintained in a controlled area. The computer system is accessible only to authorized personnel. Entry into these areas is restricted to those personnel with a valid requirement and authorization to enter. Physical entry is restricted by the use of locks, passwords which are changed periodically, and administrative procedures. The system provides two-factor authentication including Common Access Cards and passwords. Access to personal information is restricted to those who require the data in the performance of the official duties, and have received proper training relative to the Privacy Act of 1974, Health Insurance Portability and Accountability Act of 1996 Privacy and Security Rules, and Information Assurance.

RETENTION AND DISPOSAL:

Disposition pending. Until the National Archives and Records Administration has approved the retention and disposal of these records, treat them as permanent.

System Manager(s) and Address:

TRICARE Management Activity, Health Plans Operations/Health Program Analysis and Evaluation, Suite 810, Skyline Building 5, 5111 Leesburg Pike, Falls Church, VA 22041-3206.

Notification Procedure:

Individuals seeking to determine whether this system contains information about themselves should address written inquiries to TRICARE Management Activity, Health Plans Operations/Health Program Analysis and Evaluation, Suite 810, Skyline Building 5, 5111 Leesburg Pike, Falls Church, VA 22041-3206.

Written requests for the information should contain the individuals full name, address, last 4 numbers of the Social Security Number (SSN), the name and number of this system of records notice and signature.

Record Access Procedures:

Individuals seeking access to records about themselves contained in this system should address written inquiries to TRICARE Management Activity, Attention: Freedom of Information Act Requester Service Center, 16401 East Centretech Parkway Aurora, CO 80011-9066.

Requests should contain the individuals full name, address, last 4 numbers of the Social Security Number (SSN), the name and number of this system of records notice and signature.

Contesting Record Procedures:

The Office of the Secretary of Defense rules for accessing records, for contesting contents and appealing initial agency determinations are published in Office of the Secretary of Defense Administrative Instruction 81; 32 C.F.R. Part 311; or may be obtained from the system manager.

Record Source Categories:

Individuals, the Defense Enrollment Eligibility Reporting System, the Uniformed Services medical and dental treatment facilities and facilities contracted by DoD to perform medical care for Military members, former members and dependents.

Exemptions Claimed for the System:

None.