Back to Top Skip to main content Skip to sub-navigation

Breaches of PII and PHI

What is a Breach?

According to the Department of Defense (DoD), a breach of personal information occurs when the information is lost, disclosed to, accessed by, or potentially exposed to unauthorized individuals, or compromised in a way where the subjects of the information are negatively affected.

Breach Reporting

The Defense Health Agency (DHA) Privacy and Civil Liberties Office (Privacy Office) coordinates breach reporting within the Military Health System (MHS). Email us if you have questions about breaches or breach reporting within the MHS.

Guidance tools for breach reporting:

You also may be interested in...

Recommendations for Identity Theft Related Data Breach Notification


This Memorandum provides recommendations for planning and responding to data breaches which could result in identity theft.

Protection of Sensitive Agency Information


This Memorandum addresses the efforts to properly safeguard information assets while using information technology by incorporating a checklist from the National Institute of Standards and Technology (NIST) for protection of remote information.

Safeguarding Personally Identifiable Information


This Memorandum reemphasizes responsibilities under law and policy to appropriately safeguard sensitive personally identifiable information (PII) and train employees on responsibilities in this area.

<< < 1 2 > >> 
Showing results 16 - 18 Page 2 of 2

DHA Address: 7700 Arlington Boulevard | Suite 5101 | Falls Church, VA | 22042-5101

Some documents are presented in Portable Document Format (PDF). A PDF reader is required for viewing. Download a PDF Reader or learn more about PDFs.