No. The vendor executing the contract for the inTransition program is a recognized business associate of the Defense Health Agency, and must comply with the Health Insurance Portability and Accountability Act (HIPAA) regarding privacy and security of individually identifiable health information. Neither written consent by the patient, nor a signed authorization of disclosure form, is required to refer the service member/veteran to the inTransition program. Furthermore, the vendor executing the inTransition contract will ensure that applicable privacy and security requirements are strictly maintained in accessing, handling, reporting, documenting and storing patient-related information, whether paper or electronic. Applicable privacy and security requirements include those under the Privacy Act, HIPAA, the Alcohol, Drug Abuse and Behavioral Health Reorganization Act (ADAMHRA), and implementing DOD guidance.