Defense Privacy and Civil Liberties Office

U.S. Department of Defense

System of Record Notices (SORNs)

DOD Component Notice

Defense Health Agency

EDHA 22

SYSTEM NAME:

Medical Situational Awareness in the Theater (MSAT)  (January 27, 2014,  79 FR 4339)

SYSTEM LOCATION:

Force Health Protection & Readiness, Defense Health Agency Headquarters, 7700 Arlington Boulevard, Suite 5101, Falls Church, VA 22042-5101.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

Members of the uniformed services and DoD civilian employees (to include non-appropriated fund employees) who receive or have received medical or dental care at one or more DoD medical treatment facilities in an active theater of operations.

CATEGORIES OF RECORDS IN THE SYSTEM:

Individual’s name, age, date of birth, Social Security Number (SSN) and/or DoD Identification (DoD ID) number, marital status, phone number, address, race, pay grade, personnel code, mobilization status, unit identification, and unit phone number.

An individual’s Trauma Number, Register Number, and patient encounter data pertaining to symptoms; International Classification of Diseases (ICD) diagnosis codes; clinical data elements and codes with respect to symptoms, medical history, physical examination, tests, diagnosis, and therapy, medications, and vital signs; and treatment facility locations.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

10 U.S.C. Chapter 55, Medical and Dental Care; and E.O. 9397 (SSN), as amended.

PURPOSE(S):

To provide information to medical commanders and their staff on personnel readiness status before and during deployment and sustainment, patient tracking from initial point of care and enroute to CONUS military treatment facilities, medical surveillance of illnesses, injury rates and trends for theater, syndromic, and chemical, biological, radiological, and nuclear surveillance of individuals for early warning alerts.

To provide information that, when combined with medical intelligence, patient tracking, geospatial mapping, logistics, personnel, and other information, supports a single identical display of relevant information shared by more than one command to facilitate collaborative planning and to assist all echelons in achieving situational awareness, and for assisting the Combatant Command and Joint Task Force Surgeon in assessing risks, mitigating operational vulnerabilities, and allocating scarce combat resources during the planning and conduct of operations.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

In addition to those disclosures generally permitted under 5 U.S.C. 552a(b) of the Privacy Act of 1974, as amended, these records may specifically be disclosed outside the DoD as a routine use pursuant to 5 U.S.C. 552a(b)(3) as follows:

The DoD Blanket Routine Uses may apply to this system of records.

NOTE 1: This system of records contains individually identifiable health information. The DoD Health Information Privacy Regulation (DoD 6025.18-R) or any successor DoD issuances implementing the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and 45 CFR Parts 160 and 164, Health and Human Services, General Administrative Requirements and Security & Privacy, respectively, applies to most such health information. DoD 6025.18-R or a successor issuance may place additional procedural requirements on uses and disclosures of such information beyond those found in the Privacy Act of 1974, as amended, or mentioned in this system of records notice.

NOTE 2: Except as provided under 42 U.S.C. 290dd-2, records of identity, diagnosis, prognosis or treatment information of any patient maintained in connection with the performance of any program or activity relating to substance abuse education, prevention, training, treatment, rehabilitation, or research, which is conducted, regulated, or directly or indirectly assisted by a department or agency of the United States will be treated as confidential and disclosed only for the purposes and under the circumstances expressly authorized under 42 U.S.C. 290dd-2.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:


STORAGE:

Electronic storage media.

RETRIEVABILITY:

Individual’s name, date of birth, Trauma Number, Register Number, SSN and/or DoD ID Number, or any combination of the above.

SAFEGUARDS:

Electronic media, data and/or electronic records are maintained in a controlled area. The computer system is accessible only to authorized personnel. Entry into these areas is restricted to those personnel with a valid requirement and authorization to enter. Physical entry is restricted by the use of locks, passwords which are changed periodically, and administrative procedures.

The system provides two-factor authentication through user IDs/passwords. Access to personal information is restricted to those who require the data in the performance of their official duties. All personnel whose official duties require access to the information are trained in the proper safeguarding and use of the information.

RETENTION AND DISPOSAL:

Delete when the agency determines they are no longer needed for administrative, legal, audit, or other operational purposes. (N1-GRS-95-2 Item 4)(GRS 20 Item 4)

SYSTEM MANAGER(S) AND ADDRESS:

Product Manager, MSAT, Defense Health Clinical Systems, Deployment & Readiness Systems Program Management Office, Skyline 6, Suite 817, 5109 Leesburg Pike, Falls Church, VA 22041-3226.

NOTIFICATION PROCEDURE:

Individuals seeking to determine whether information about themselves is contained in this system of records should address written inquiries to the Chief, Freedom of Information Act (FOIA) and Privacy Act Service Center, Defense Health Agency Privacy and Civil Liberties Office, Defense Health Agency Headquarters, 7700 Arlington Boulevard, Suite 5101, Falls Church, VA 22042-5101.

Requests should contain the individual’s full name, SSN and/or DoD ID Number, and signature.

RECORD ACCESS PROCEDURES:

Individuals seeking access to information about themselves contained in this system of records should address inquires to the Chief, FOIA and Privacy Act Service Center, Defense Health Agency Privacy and Civil Liberties Office, Defense Health Agency Headquarters, 7700 Arlington Boulevard, Suite 5101, Falls Church, VA 22042-5101.

Requests should contain the individual’s full name, SSN and/or DoD ID Number, and signature.

CONTESTING RECORD PROCEDURES:

The Office of the Secretary of Defense (OSD) rules for accessing records, for contesting contents and appealing initial agency determinations are published in OSD Administrative Instruction 81, 32 CFR Part 311, or may be obtained from the system manager.

RECORD SOURCE CATEGORIES:

Theater Medical Data Store, AHLTA-Theater, and Theater Medical Information Program Cache.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

None.

FEDERAL REGISTER HISTORY:

June 24, 2008, 73 FR 35669; January 27, 2014, 79 FR 4339.