This policy is no longer in effect. Read the current policy.
Privacy Act Warning
You do not have to provide the information requested for My HealtheVet registration to VA, but if you don't, we will be unable to process your request and provide you My HealtheVet electronic services. Your decision to not provide this information will not have any effect on any other benefits to which you may be entitled.
My HealtheVet recognizes the premium you place on privacy protection on the Internet and we make every effort to protect that privacy. Certain administrative information, such as your name, user ID, date of birth, social security number, gender, email address, user type and zip code are collected in order to provide you access to My HealtheVet and is subject to the Privacy Act of 1974 (5 U.S.C. 552a, as amended). Only authorized persons in the conduct of official business may use personal, administrative information contained in the My HealtheVet Administrative system of records. Any unauthorized disclosure or misuse of personal administrative information may result in criminal and/or civil penalties. Any individual may file a civil action in a Federal District Court against VA if the individual believes that VA violated the Privacy Act.
For site management, information is collected for statistical and management purposes. This government computer system uses software programs to create anonymous, summary statistics, which are used for such purposes as assessing what information and My HealtheVet services are of the most and least use to users, determining technical design specifications, and identifying system performance or problem areas. For site security purposes and to ensure that this service remains available to all users, this government computer system employs software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage. Except for authorized law enforcement investigations, no other attempts are made to identify individual users or their usage habits. Unauthorized attempts to upload information or change information on this service are strictly prohibited and may be punishable under Federal law.
My HealtheVet is a Department of Veterans Affairs computer system. This computer system, including all related equipment, networks, and network devices (specifically including Internet access) are provided only for authorized uses. VA computer systems may be monitored for all lawful purposes, including ensuring that their use is authorized, managing the system, protecting against unauthorized access, and verifying security procedures, survivability, and operational security. During monitoring, information may be examined, recorded, copied and used for authorized purposes.
The My HealtheVet application does not use "persistent cookies" to retain information on users of My HealtheVet. The Department of Veterans Affairs prohibits the use of "persistent cookies," a type of web technology that collects user-identifying information over time and across different web sites.
Use of Email Addresses
Users who have requested email updates, based on selections within "Areas of Interest" may receive information that may help them better manage their care. We will only use your e-mail address to forward you materials on the information you have noted as an interest upon registration. Your e-mail address may also be used for forgotten password or user account information, and in the future it may be used as a tool for messaging. Users, who receive requested information, will always have the ability at any time to opt out of receiving any future information.
Security of Information
At all times, security maintenance and administration is an essential element of web site operation and maintenance. My HealtheVet employs several levels of security to protect the personal identifiable information of registered users. When you type in your personal information, My HealtheVet establishes a secure connection with your browser so your information is 'encrypted' or scrambled for transmission and storage. In addition, these security levels are believed to be in compliance with the Health Information Portability and Accountability Act of 1996 (HIPAA) (Pub. L. 104-191, Aug 21, 1996,110 Stat. 1936), and implementing regulations 45 CFR, Parts 160 and 164.
Secure Socket Layer (SSL)
A security protocol, which provides a transmission level of encryption between the user's browser and My HealtheVet server machines. SSL is a method for protecting a My HealtheVet user's identification and password.
The MHV ID number is a randomly generated number assigned to all MHV user accounts. You get your MHV ID automatically when you register for MHV. It is an additional security measure to protect your information. Future features of MHV will require the MHV ID.
Personal Responsibility for Personal Information
Users can establish links on their personal My HealtheVet home page, and enter appointments into a personal calendar and establish personal eVAults for storing self-entered health information and metrics. Users of My HealtheVet are the sole owners of the information contained in their My HealtheVet accounts, and as such, take full responsibility for disclosing information in their accounts to other individuals.
Registration and Log In
You are always welcome to use My HealtheVet without registering or logging in for certain services such as customizing your web page or entering self entered information. When you use these features, we will require your user ID and password for identification.
When you register for a My HealtheVet account, access to your personal pages will be password protected. You will have five (5) chances to enter the correct password before you are locked out of the system. We strongly recommend that you do not divulge your password to anyone and that you change on a regular basis. Exercise personal security in how you handle your password. My HealtheVet will never ask for your password in an unsolicited phone call or unsolicited e-mail.
You should remember to log out when you are finished accessing password protected My HealtheVet services. This prevents someone else from accessing your personal information if you leave, share, or use a public computer (i.e., like a library, or Internet café) and your session hasn't automatically "timed out" or shut down. You should remember to log out. If you forget to log out or 30 minutes of non-activity pass, the session will time out.
Exit Site Notice
My HealtheVet has links to many other organizations. In a few cases we link to private organizations, with their permission. Once you link to another site, you are subject to the privacy and security policy of the new site. When My HealtheVet links to external Internet sites, it does so by opening a new window (or browser) on your screen. Any information in these secondary windows (browsers) should be considered external to the My HealtheVet website, and VA is not responsible for its content.
Saving of Passwords by Browser
Many Internet browsers (such as Internet Explorer and Netscape Navigator) allow users to save user IDs and passwords. When prompted by a browser to save your My HealtheVet user ID and password, you should decline this option. Saving user IDs and passwords could potentially allow persons who gain access to your workstation to access your personal information. (In some cases, you may have an option to unselect a checked box that prompts you to save this information. To prevent this prompt from appearing again, you can unselect the checked box by clicking on it with your mouse.)
Surveys, Questionnaires, and Polls
My HealtheVet may use surveys, questionnaires and polls to facilitate feedback and input from our users. When you respond to surveys, questionnaires or polls related to our site, this information is collected only as anonymous, aggregated information and is used for statistical purposes. When used in conjunction with your personal health record, this information will be used to assist you in any of the areas that you direct.
Reviewed/Updated December 30, 2008