Development of capability prototype on secure access to health record for members of the Armed Forces

(a) Capability prototype Not later than 180 days after the date of the enactment of this Act, the Secretary of Defense shall develop and implement a capability prototype that is interoperable with the electronic health record of the Department of Defense for active duty members of the Armed Forces who receive health care from the Defense Health Agency to digitally collect their medical records through a covered health record platform before separating from active duty. (b) Contracts (1) Authority The Secretary shall seek to enter into a contract using competitive procedures with an appropriate entity for the provision of the covered health record platform under the capability prototype under subsection (a). (2) Notice of competition (A) In general Not later than 60 days after the date of the enactment of this Act, the Secretary shall issue a request for proposals for the contract described in paragraph (1). (B) Open competition A request under subparagraph (A) shall be full and open to any contractor that has an existing covered health record platform. (3) Selection Not later than 120 days after the date of the enactment of this Act, the Secretary shall award a contract to an appropriate entity pursuant to the request for proposals under paragraph (2) if at least one acceptable offer is submitted. (c) Pilot program on use of capability prototype (1) In general The Secretary shall carry out a pilot program under which the Secretary shall assess the feasibility and advisability of using the capability prototype developed under subsection (a) for a period of not less than 180 days. (2) Selection of Armed Forces The Secretary shall select not less than one Armed Force in which to carry out the pilot program under paragraph (1). (3) Termination or extension of use of capability prototype At the end of the period specified in paragraph (1), the Secretary shall survey all participants in the pilot program under such paragraph and, based on survey results, may— (A) terminate the capability prototype developed and implemented under subsection (a); (B) continue the capability prototype; (C) expand the capability prototype; or (D) implement the use of a covered health record platform in the Defense Health Agency throughout the uniformed services. (d) Prohibition on new appropriations No additional funds are authorized to be appropriated to carry out the requirements of this section and such requirements shall be carried out using amounts otherwise authorized to be appropriated for the Department of Defense through the Joint Incentive Fund. (e) Briefing required Not later than April 1, 2027, the Secretary of Defense shall provide to the Committees on Armed Services of the Senate and the House of Representatives a briefing on the capability prototype developed and implemented under subsection (a). (f) Covered health record platform defined In this section, the term covered health record platform means a health record platform that meets the following requirements: (1) Has web-based and native mobile phone application capabilities. (2) Has the capability to store and share records with the Department of Veterans Affairs or any other designated care provider. (3) Has the capability to store records in the cloud. (4) Does not have a requirement for integration to receive or share records. (5) Has the capability to instantly share data based on a combination of access key and personal identifier. (6) Has the capability to provide secure data storage and records transfer upon separation of a member of the Armed Forces from active duty. (7) Does not require a business associate agreement with any party. (8) Has secure data isolation with access controls. (9) Has, at a minimum, data security that would require separate encryption for each document, relying on AES256 or better algorithm with keys encryption using RSA2048 or better algorithm, or any successor similar algorithm.