Who is authorized to disclose health information to the MHS?

• A. The unit commander
• B. The service member
• C. The BOMC
• D. DoD health care providers

Answer: (B)

The service member is the one who authorizes releasing their health information to the Military Health System. In DoD privacy practice, a patient controls disclosures of their PHI beyond what is automatically shared for treatment, payment, and health care operations within the MHS. The service member can sign an authorization to allow records to be obtained or shared to coordinate care, transfer information between providers, or permit outside providers to send data into the MHS. Other parties, like a unit commander, BOMC, or DoD health care providers, don’t have blanket authority to disclose a service member’s health information to the MHS without that member’s consent or unless the disclosure is permitted under standard treatment-sharing rules.