The Military Health System must comply with Federal law protecting the privacy and security of personally identifiable information and protected health information (PII/PHI), as well as with other Federal information laws. Therefore, standard language to require compliance must be included whenever a solicitation is issued or a contract awarded (or other agreement is entered into) if performance involves PII/PHI.

For contracts awarded by or for the Defense Health Agency, see:

• DHA Standard Contract Language
• Procurement Directorate guidance at PGI 224.1-90

That guidance explains how to incorporate by reference all or part of the DHA Standard Contract Language in contract documents.  

For contracts or other agreements used by MHS components other than DHA, see:

• HIPAA Compliant Business Associate Agreement (BAA) for the MHS

Please note that the linked documents are subject to change.

Need Contractor Access to Network Systems?

If you need to get contractor personnel access to Health Affairs, DHA or DOD network systems, contact the Administration and Management Directorate.

Address:

Administration and Management Directorate (A&MD)
Mission Assurance Division
Personnel Security Branch
7700 Arlington Blvd
Falls Church, VA 22042

Phone:

703-881-6777

Secure Fax:

703-681-0810