(4) All requests for records and information made pursuant to the FOIA, 5 U.S.C. 552, the Privacy Act of 1974, 5 U.S.C. 552a, or HIPAA, 42 U.S.C. 1320d, will be processed in accordance with the procedures set forth in AR 25-55 and AR 340-21, respectively as well as 45 CFR Parts 160 and 164, DODD 6025.18-R, this part, and DA Pam 27-162.
- (i) Any request for DOD records that either explicitly or implicitly cites the FOIA shall be processed under the provisions of AR 25-55. Requests for DOD records submitted by a claimant or claimant's attorney will be processed under both the FOIA and under the Privacy Act when the request is made by the subject of the records requested and those records are maintained in a system of records. Such requests will be processed under the FOIA time limits and the Privacy Act fee provisions. Withheld information must be exempt from disclosure under both Acts.
- (ii) Requests that cite both Acts or neither Act are processed under both Acts, using the FOIA time limits and the Privacy Act fee provisions. For further guidance, see AR 25-55, paragraphs 1-301 and 1-503.