Health Insurance Portability and Accountability Act (HIPAA):

Relationship-based care focused on the whole person and understanding and respecting each patient's unique needs, culture, values and preferences. The practice actively supports the patients in learning to manage and organize their own care at the level they choose. Recognition that the family members are also core members of the care team and are included in establishing goals and care plans.

Notice of Privacy Practices (NOPP)

1. When you receive treatment at this military facility or clinic, you will be given a copy of the Notice of Privacy Practices (NOPP). This document details how your medical information may be used and with whom it may be shared. When you receive this, we will ask you to sign a form acknowledging receipt of this notice.
2. You may choose what language in which to read the NOPP

HIPAA and Privacy

Congress enacted the Health Insurance Portability and Accountability Act (HIPAA) of 1996 to:

• Combat waste, fraud and abuse
• Improve portability of health insurance coverage
• Simplify health care administration

HIPAA Compliance Requirements

All military and civilian health care plans, health care clearinghouses and health care providers who electronically conduct financial and administrative transactions must comply with HIPAA. TRICARE, military hospitals and clinics, providers, regional contractors, subcontractors and other business associate relationships fall within these categories. HIPAA's Privacy Rule and Security Rule relate specifically to the privacy and security of your protected health information (PHI).

HIPAA Privacy Rule Protection

The HIPAA Privacy Rule lets medical staff use and disclose your PHI for treatment, payment and health care operations without written authorization. Your permission is required for most other uses and disclosures.

Under the Privacy Rule, you have the right to:

1. Receive a copy of the Military Health System Notice of Privacy Practices
2. Request access to PHI
3. Request amendment of PHI
4. Request an accounting of PHI disclosures
5. Request restriction on PHI use and disclosure
6. File a complaint regarding privacy infractions.

Privacy Officer

Each military hospitals and clinic has a privacy officer who ensures health care information remains private, but available to you and your provider. The privacy officer can answer any questions you may have about HIPAA rules. The Defense Health Agency (DHA) also has a privacy office you can contact for information or assistance.

Concerns about privacy violations

If you think your privacy rights have been violated, you may come in an speak to RWBAHC HIPAA Privacy Officer located in RM G24/G26 or fill out the attached RWBHAC Form 551, Health Information Privacy Complaint form and send it to the RWBAHC HIPAA Privacy Office. You may also file your complaint directly to the DHA Privacy and Civil Liberties Office, whose address is on the NOPP.