BY ORDER OF THE
SECRETARY OF THE AIR FORCE
AIR FORCE INSTRUCTION 41-200
25 JULY 2017
Health Services
HEALTH INSURANCE PORTABILITY
AND ACCOUNTABILITY ACT (HIPAA)
COMPLIANCE WITH THIS PUBLICATION IS MANDATORY
ACCESSIBILITY: Publications and forms are available on the e-Publishing website at
www.e-Publishing.af.mil for downloading or ordering.
RELEASABILITY: There are no releasability restrictions on this publication.
OPR: AFMSA/SG3S Policy Branch Certified by: AF/SG3/5
(Maj Gen Roosevelt Allen, Jr.)
Pages: 60
This publication implements Air Force Policy Directive (AFPD) 41-2, Medical Support. This
Instruction identifies and defines the requirements, policies, procedures, and activities necessary
to ensure successful compliance with the Health Insurance Portability and Accountability Act
(HIPAA) Privacy and Security Rules. It describes how to manage administration functions for
the establishment of the HIPAA privacy program, including personnel designations, training,
safeguarding medical information, handling complaints, sanctions, mitigation, policies and
procedures, refraining from intimidating or retaliatory acts, and documentation requirements.
Organizational alignment of these functions may vary among Medical Treatment Facilities. This
Instruction requires the collection and or maintenance of information protected by HIPAA, 45
CFR Parts 160 & 164, and the Privacy Act (PA) of 1974, 5 United States Code (U.S.C.) Section
552a. The applicable SORN [F044 F SG E, Electronic Medical Records System] is available at:
http://dpclo.defense.gov/Privacy/SORNs.aspx. Forms affected by the PA have an appropriate
PA statement. This instruction applies to all Air Force medical units; Air National Guard or Air
Force Reserve Component personnel when assigned to or provide operational support when
members are working as part of the covered entity. This instruction does not apply to Air Force
personnel participating at a non-Air Force facility, military or civilian, as part of their official
duties pursuant to an agreement; in those instances, the other facility’s policies and procedures
would apply. This publication may be supplemented at any level, but all supplements must be
routed to the Office of Primary Responsibility (OPR) listed above for coordination prior to
certification and approval. Refer recommended changes and questions about this publication to
the OPR listed above using the AF Form 847, Recommendation for Change of Publication; route
AF Forms 847 from the field through the appropriate chain of command. The authorities to
waive wing/unit level requirements in this publication are identified with a Tier (“T-0, T-1, T-2,
Certified Current on, 10 April 2020
