(a) Pilot program
Not later than 180 days after the date of the enactment of this Act, the Secretary of Defense shall commence a pilot program under which a member of the Armed Forces serving on active duty may use a covered health record platform to collect the health records of the member before separating from active duty.
(b) Selection of Armed Force
The Secretary shall select not fewer than one Armed Force in which to carry out the pilot program under subsection (a).
(c) Contracts
(1) Authority
The Secretary shall seek to enter into a contract using competitive procedures with an appropriate entity for the provision of the covered health record platform under the pilot program under subsection (a).
(2) Notice of competition
(A) Request for proposals
Not later than 60 days after the date of the enactment of this Act, the Secretary shall issue a request for proposals for the contract described in paragraph (1).
(B) Open competition
A request under subparagraph (A) shall be full and open to any contractor that has an existing covered health record platform.
(3) Selection
Not later than 120 days after the date of the enactment of this Act, the Secretary shall award a contract to an appropriate entity pursuant to the request for proposals under paragraph (2) if the Secretary determines that at least one acceptable offer is submitted.
(d) Duration of pilot program
(1) Period
The Secretary shall carry out the pilot program under subsection (a) for a period of not less than one year.
(2) Termination or extension of program
After carrying out the pilot program under subsection (a) for a period of 180 days, the Secretary shall survey all participants in the pilot program and, based on survey results, may—
terminate the pilot program;
continue the pilot program;
expand the pilot program; or
implement the use of a covered health record platform in the Defense Health Agency throughout the Armed Forces.
(e) Prohibition on new appropriations
No additional funds are authorized to be appropriated to carry out the requirements of this section.
(f) Covered health record platform defined
In this section, the term covered health record platform means a secure personal health record platform that meets the following requirements:
Has web-based and native mobile phone application capabilities.
Has the capability to store and share records with the Department of Veterans Affairs or any other designated care provider.
Has the capability to store records in the cloud.
Does not have a requirement for integration to receive or share records.
Has the capability to instantly share data based on a combination of access key and personal identifier.
Has the capability to provide secure data storage and records transfer upon separation of a member of the Armed Forces from active duty.
Does not require a business associate agreement with any parties.
Has secure data isolation with access controls.
Has, at a minimum, data security that would require separate encryption for each document, relying on AES256 or better algorithm with keys encryption using RSA2048 or better algorithm, or any successor similar algorithm.