DODD 8580.02-R
DoD HEALTH INFORMATION SECURITY REGULATION
| Organization: | DODD |
| Publication Date: | 12 July 2007 |
| Status: | inactive |
| Page Count: | 37 |
scope:
APPLICABILITY AND SCOPE
This Regulation applies to the Office of the Secretary of Defense, the Military Departments, the Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all organizational entities within the Department of Defense that use or disseminate Health Information (hereafter collectively referred to as the "DoD Components").
Except as otherwise provided, the requirements adopted under this Regulation apply to the following entities, as defined in Reference (f):
The health plans of the Military Health System.
Healthcare providers that transmit health information in electronic form in connection with a transaction covered by this Regulation.
PURPOSE
This Regulation:
Implements the HIPAA of 1996 (Reference (b)) and parts 160, 162, and 164 of title 45, C.F.R. (Reference (c)).
Implements policy and assigns responsibilities for applying the standards for security of individually identifiable health information under Reference (c).
Complements DoD information assurance controls in accordance with DoD Directive 8500.1 (Reference (i)), DoD Instruction 8500.2 (Reference (j)), and information security requirements, in accordance with DoD 5200.1-R (Reference (k)).
Document History
