This Regulation, "DoD Health Information Privacy Regulation," is issued under the authority of DoD Directive 6025.18, "Privacy of Individually Identifiable Health Information in DoD Health Care Programs," December 19, 2002 (reference (a)). It prescribes the uses and disclosures of protected health information. This Regulation is based on the requirements of the Health Insurance Portability and Accountability Act, Public Law 104-191 (reference (b)). Although it covers much of the same ground as the Privacy Act of 1974 (reference (c)), this Regulation in no way impacts the need for the Department of Defense to comply with reference (c) which has been implemented within DoD by DoD 5400.11-R (reference (d)). This Regulation applies to the Office of the Secretary of Defense, the Military Departments, the Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities within the Department of Defense.