DHA Privacy Board Annual Report Fiscal Year 2014

Read the DHA Privacy Board Annual Report for fiscal year 2014.

DHA Privacy Board Review Process for Research Related Data Requests

This flowchart outlines the process the DHA Privacy Board uses to review research related data requests for protected health information (PHI) about individual research participants for Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule compliance.

Prerequisites to DHA Privacy Board Review

This flowchart outlines the requirements that must be initiated before the DHA Privacy Board reviews a research project for compliance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule and Department of Defense (DoD) Health Information Privacy Regulation (DoD 6025.18-R).

TMA Privacy Board Annual Report Calendar Year 2012

Read the TMA Privacy Board Annual Report for calendar year 2012.

DHA Privacy Board Annual Report Fiscal Year 2013

This report highlights the major accomplishments of the TMA Privacy Board during FY13. There were three new significant developments that required the Board to adjust some of its processes: 1) A careful study of the streamlining possibilities in viewing the MHS as a HIPAA single covered entity; 2) Clarifying advice received regarding information systems owned by the MHS; and, 3) The release of the HIPAA Omnibus Final Rule implementing both the statutory amendments to HIPAA in the Health Information Technology for Economic and Clinical Health Act (HITECH Act) and the Genetic Information Non-Discrimination Act (GINA) and other modifications under the authority of the Department of Health and Human Services, Office of Civil Rights (DHHS/OCR). The

Standard Operating Procedures (SOP)

Learn more about the Standard Operating Procedures as it relates to the internal operations of the DHA Privacy Board.

TRICARE Management Activity’s Human Research Protection Program, Data Sharing Agreement Program, and the TMA Privacy Board

This Presentation provides an overview on the Defense Health Agency (DHA) Privacy and Civil Liberties Office (Privacy Office) functions, including the Human Research Project Program (HRPP), the Data Sharing Agreement (DSA) Program, and the DHA Privacy Board’s Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule reviews. This presentation took place at the Human Protections Administrators’ Conference in Fort Detrick, Maryland on August 29, 2012.

DHA Privacy Board Application for a Waiver of Authorization or an Altered Authorization

Use this form if the researcher has not received documentation from an Institutional Review Board (IRB) or HIPAA Privacy Board approving a waiver or alteration of Authorizations and reasons exist that make it impractical or impossible for the researcher to obtain Authorizations from each research participant, the PI may submit an Application for a Waiver of Authorization or an Altered Authorization. A DHA Privacy Board member will conduct an expedited review of the completed application and determine whether to approve or deny an altered Authorization or a full or partial waiver of Authorizations.

Principal Investigator Certification

Use this form if a Research Authorization Review template and an Authorization are approved by the DHA Privacy Board, a PI will be required to sign a Principal Investigator Certification. Among other requirements, the certification ensures that the PI will maintain, electronically and/or in hard copy, the signed Authorization for each research participant whose PHI is used or disclosed in the project, and will provide any and/or all of the signed Authorizations to DHA immediately upon request.

Required Representations for Research on Decedents Information

Use this form if the researcher intends to conduct research that is solely on the protected health information (PHI) of decedents, the PI may submit this template to document the required representations, as outlined above, that are necessary for compliance with the HIPAA Privacy Rule and Department of Defense (DoD) Health Information Privacy Regulation (DoD 6025.18-R).

Required Representations for Review Preparatory to Research

Use this form if the researcher intends to conduct a review of PHI to prepare for a research protocol or for similar purposes preparatory to research (e.g., for recruitment or screening purposes) and agrees not to remove the PHI from DHA, the PI may submit this template to document the required representations, as outlined above, that are necessary for compliance with the HIPAA Privacy Rule and DoD 6025.18-R.

Research Authorization Review

Use this form if the researcher intends to obtain HIPAA Authorizations, also known as “Authorizations,” from research participants to comply with the HIPAA Privacy Rule, the PI must submit to the DHA Privacy Board a copy of the blank Authorization(s) to be used in the project and the completed Research Authorization Review. The DHA Privacy Board will conduct a review to determine that all core elements and required statements are provided in the Authorization(s) as required by the HIPAA Privacy Rule and DoD 6025.18-R.

Establishment of a TMA Privacy Board and Revision of Section C7.9.1 of Department of Defense (DoD) Health Information Privacy Regulation (DoD 6025.18-R)

This Memorandum approves the request for an exception to the policy permitting the establishment and use of a TRICARE Management Activity (TMA) Privacy Board for the limited purpose of reviewing research requests in which the research involves MHS protected health information (PHI) owned and/or managed by TMA.

• Identification #: N/A
• Date: 4/13/2009
• Type: Memorandums
• Topics: Privacy Board

DoD 6025.18-R, DoD Health Information Privacy Regulation

This Regulation is issued under the authority of DoD Directive 6025.18, “Privacy and Individually Identifiable Health Information in DoD Health Care Programs,” December 19, 2002. It prescribes the uses and disclosures of protected health information.

• Identification #: DoD 6025.18-R
• Date: 1/24/2003
• Type: Federal Regulations
• Topics: Submit a Data Sharing Application, Privacy Impact Assessments, Breaches of PII and PHI, Privacy Board, How HIPAA Protects You, HIPAA Compliance within the MHS