Release of Records and Personal Health Information
Requests for medical records must include the proper authorization and release from the beneficiary.
Requesting Your Records
When you submit a written or electronic request for records at your local military hospital or clinic, you may be asked to submit a form or to provide identifying information like your date of birth, Social Security number, or photo identification.
Spouse, Family Member, or Other Third Party Requesting Your Records
If you'd like someone else (spouse, family member, or an attorney), to have a copy or access to your medical records, you must fill out and submit an SSA-827 Authorization to Disclose Information form.
Generally, parents may have access to their child's (under age 18) medical records when laws allow parents or guardians to make treatment decisions for their child. The only exceptions (when a parent is not a "personal representative" with respect to health information about a child) are:
- When state law or other law does not require consent of a parent before the minor can obtain a health care service
- When a court appoints someone other than the parent to make treatment decisions
- When the parent agrees that the minor and the provider may have a confidential relationship
If your child is age 18 or older, they'll need to fill out an SSA-827 Authorization to Disclose Information form for parents, guardians, or someone else to have access to their medical records.
Sharing Your Records with Another Provider
Your military provider will share your medical records and protected health information with other providers who provide health services to you. For example, if your military provider refers you to a specialist outside of the military hospital or clinic, they'll forward your medical records to the specialist before your appointment. Pharmacists may be provided information on other drugs you have been prescribed to identify potential interactions.
You can learn more about these types of disclosures by reading the Military Health System Notice of Privacy Practices or by contacting the privacy officer at your military hospital or clinic.
Sharing Your Records with Other Third Parties
Your military provider is allowed, and sometimes required, to share your PHI with other third parties as outlined in the MHS Notice of Privacy Practices. For example, your provider may disclose your PHI for law enforcement purposes or to public health authorities, who are permitted by law to collect and receive such information. Read the MHS Notice of Privacy Practices for details.myAuth is replacing DS Logon for milConnect access. Learn more about the myAuth transition.
Attention TRICARE Users: myAuth will roll out in phases. This began with milConnect and ID Card Office Online on May 21. Over time, all DOD applications that use DS Logon will transition to myAuth.
Last Updated 5/2/2025