The Defense Health Agency (DHA) Privacy and Civil Liberties Office established a Health Insurance Portability and Accountability Act (HIPAA) Privacy Board, otherwise known as the DHA Privacy Board, to provide HIPAA Privacy Rule reviews and documentation for researchers that seek to use and/or disclose protected health information (PHI) managed by DHA. The DHA Privacy Board is critical for DHA’s compliance with the HIPAA Privacy Rule (45 CFR 160 & 164) and Department of Defense (DoD) Health Information Privacy Regulation (DoD 6025.18-R).

More information on the establishment of the DHA Privacy Board can be found here: Memorandum for the Establishment of a TMA Privacy Board and Revision of Section C7.9.1 of Department of Defense (DoD) Health Information Privacy Regulation (DoD 6025.18-R).

Privacy Board Annual Report

The DHA Privacy Board releases an Annual Report each calendar year, highlighting the achievements of the Board, providing information about the direction of the Board in the upcoming year, and acknowledging the Board members who volunteer both expertise and time to the effort of the DHA Privacy Board. The annual reports are accessible by title as listed below:

• Defense Health Agency (DHA) Privacy Board Annual Report Fiscal Year 2015
• Defense Health Agency (DHA) Privacy Board Annual Report Fiscal Year 2014
• Defense Health Agency (DHA) Privacy Board Annual Report Fiscal Year 2013
• TRICARE Management Activity (TMA) Privacy Board Annual Report Calendar Year 2012

Board Members

As required by the HIPAA Privacy Rule and DoD Health Information Privacy Regulation (DoD 6025.18-R), the DHA Privacy Board:

• Has members of varying and appropriate professional competency as necessary to review the effect of the research protocol on the individual’s privacy rights and related interests;
• Includes at least one member who is not affiliated with the HIPAA covered entity (DHA within the Military Health System (MHS)), not affiliated with any entity conducting or sponsoring the research, and not related to any person who is affiliated with any of such entities; and
• Does not have any member participating in a review of any project in which the member has a conflict of interest.