scope:

Statutory Basis and Purpose. The requirements of this Regulation implement sections 1171 through 1179 of the Social Security Act (reference (l)), with which covered entities of the Department of Defense are required to comply, and the implementing HHS Privacy Regulation (reference (g)).

Applicability. This Regulation applies to the Office of the Secretary of Defense, the Military Departments, the Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities in the Department of Defense (hereafter referred to collectively as "the DoD Components"). See also sections C2.1. and C2.2. of this Regulation which reference the entities to which the standards, requirements and implementation specifications are and are not applicable.