(a) General. A DS Logon credential will be made available to all beneficiaries that are eligible for DoD-related benefits or entitlements to facilitate secure authentication to critical websites. This includes members of the uniformed services, veterans with a continuing affiliation to the DoD, spouses, dependent children aged 18 and over, and other eligible individuals identified in paragraph (b) of this section.

(b) Overview. Only one DS Logon credential may exist for an individual, regardless of the number of affiliations an individual may have to the DoD.

(1) Eligibility. Beneficiaries of DoD-related benefits or entitlements and other individuals with a continuing affiliation with the DoD may be eligible for a DS Logon credential. Eligible populations include:

(i) Veterans, including former members, retirees, Medal of Honor recipients, disabled American veterans, and other veterans with a continuing affiliation to the DoD.

(ii) Eligible retired DoD civilian employees in accordance with DoD Instruction 1330.17, “DoD Commissary Program” (available at http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/133017p.pdf), and DoD Instruction 1330.21, “Armed Services Exchange Regulations” (available at http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/133021p.pdf).

(iii) Eligible dependents in accordance with Volume 2 of DoD Manual 1000.13, “DoD Identification (ID) Cards: Benefits for Members of the Uniformed Services, Their Dependents, and Other Eligible Individuals” (available at http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/100013_vol2.pdf), including spouses, dependent children aged 18 or older, and dependent parents.

(iv) DBs, including eligible widows, widowers, and former spouses, in accordance with Volume 2 of DoD Manual 1000.13.

(v) Surrogates, as described in paragraph (d) of this section.

(vi) Other populations as determined by the Director, DMDC.

(2) [Reserved]

(c) Lifecycle—(1) Application. Eligible individuals, as identified in paragraph (b)(1) of this section, may apply for a DS Logon credential:

(i) Online. Individuals with internet access may apply for a sponsor or dependent DS Logon by submitting a:

(A) My Access Center website request. This type of request supports the provisioning of a Basic DS Logon credential. The My Access Center website can be accessed at https://myaccess.dmdc.osd.mil/.

(B) CAC request. Individuals with a CAC, a computer with internet access and a CAC reader may apply for either a sponsor or a dependent DS Logon credential via the My Access Center website or any application that has implemented DS Logon.

(1) A sponsor DS Logon credential is provisioned immediately upon request. This type of request supports the provisioning of a Premium DS Logon credential.

(2) A request for a DS Logon credential on behalf of a dependent generates an activation letter with an activation code that is mailed to the sponsor at his or her home address in DEERS. Once complete, this type of request supports the provisioning of a Premium DS Logon credential.

(C) Request using a Defense Finance and Accounting Services (DFAS) myPay account. Eligible individuals may apply for a sponsor or dependent DS Logon credential using a DFAS myPay personal identification number via the My Access Center website. A request for a DS Logon credential generates an activation letter with an activation code that is mailed to the sponsor at his or her home address in DEERS. Once complete, this type of request supports the provisioning of a Premium DS Logon credential.

(ii) Via remote proofing. Eligible individuals with an existing DEERS record may apply for a sponsor or dependent DS Logon credential using remote proofing via the My Access Center website. Individuals requesting a DS Logon credential via remote proofing must correctly answer a number of system-generated questions. Once remote proofing is completed, a Premium DS Logon credential is provisioned immediately.

(iii) Via in-person proofing. Eligible individuals may apply for a sponsor or dependent DS Logon credential using in-person proofing. In-person proofing is performed at Department of Veterans Affairs regional offices where the DS access station application is implemented, and at DoD ID card sites when a DS Logon credential is requested either in conjunction with DoD ID card issuance or during initial enrollment of a surrogate. Once in-person proofing is completed, a Premium DS Logon credential is provisioned immediately. Individuals requesting a DS Logon credential via in-person proofing must present:

(A) Identity documents. DS Logon credential applicants must satisfy the identity verification criteria in paragraph 4a of Volume 1 of DoD Manual 1000.13, “DoD Identification (ID) Cards: ID Card Life-Cycle” (available at http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/100013_vol1.pdf), by presenting two forms of government-issued ID, one of which must contain a photograph. The requirement for the primary ID to have a photo cannot be waived. Identity documents must be original or a certified copy. All documentation not in English must have a certified English translation.

(B) Proof of address. DS Logon credential applicants must present proof of address, if address on the presented ID is different than the address in DEERS.

(C) DD Form 214, “Certificate of Release or Discharge from Active Duty.” DS Logon credential applicants must present a DD Form 214 if a veteran who was separated before 1982. If separated from the Reserve Component, a DS Logon credential applicant may present a Reserve Component separation document in lieu of a DD Form 214.

(2) Use. DS Logon credential holders may use their DS Logon credential at the My Access Center website and any other DoD self-service website that accepts DS Logon.

(3) Maintenance. DS Logon credential holders may use the My Access Center website to maintain and update their DS Logon credential and manage their personal settings. The DS Logon credential holder may:

(i) Activate or deactivate an account.

(ii) Reset password.

(iii) Update challenge questions and answers.

(iv) Upgrade from a Basic DS Logon to a Premium DS Logon credential.

(v) Select or update preferred sponsor, if a dependent of two sponsors.

(vi) Manage personal and advanced security settings.

(vii) Manage contact information.

(viii) Manage relationships and access granting.

(ix) Manage the DS Logon credential using additional capabilities as implemented by the Director, DMDC.

(4) Decommissioning. DS Logon credentials may be decommissioned by the DS Logon credential holder, via self-service; by an operator, at the request of the DS Logon credential holder; or by the system, when the credential holder no longer has an affiliation to the DoD or is identified as deceased in DEERS.

(5) Reactivation. DS Logon credentials may be reactivated if the person is living and still eligible for the credential.

(d) Associations. DS Logon supports several types of associations, including DEERS-identified family relationships and operator-initiated and -approved surrogates.

(1) Family. Individuals are connected to one another based on their family relationship information in DEERS. A family relationship must exist in DEERS before the relationship can exist in DS Logon.

(i) Multiple sponsors. An individual has only one DS Logon credential, regardless of the number of sponsors the individual has (e.g., a dependent child whose parents are both Service members).

(ii) Transferring families. If an individual has a second family in DEERS, the individual can move their DS Logon credential to the second family. This changes the assignment of the DS Logon credential from the first family to the second family and removes any granted permissions from the first family.

(2) Surrogacy. Surrogacy is a feature that allows an individual who may not be affiliated with the DoD and who may not be related to the DS Logon credential holder or eligible individual by a DoD-recognized family relationship to be granted access to a DS Logon credential holder's or an eligible individual's information. A surrogate may be established as the custodian of a deceased Service member's unmarried minor child(ren) who is under 18, who is at least 18 but under 23 and attending school full-time, or who is incapacitated. A surrogate may also be established as the agent of an incapacitated dependent (e.g., spouse, parent) or of a wounded, ill, or incapacitated Service member.

(i) Eligibility. An operator must first establish an identity in DEERS before establishing the surrogacy association in DS Logon. To establish a surrogate association, the surrogate must present to an operator for approval:

(A) A completed and signed DD Form 3005, “Application for Surrogate Association for DoD Self-Service (DS) Logon.”

(B) Any additional eligibility documents required by the DD Form 3005 which describe the scope of the surrogate's authority.

(C) Proof of identity, in accordance with the requirements for in-person proofing in paragraph (c)(1)(iii) of this section.

(ii) Types of surrogates—(A) Financial agent (FA). An eligible individual names an FA to assist with specific financial matters.

(B) Legal agent (LA). An eligible individual names an LA to assist with legal matters.

(C) Caregiver (CG). An eligible individual names a CG to assist with general health care requirements (example, viewing general health-care related information, scheduling appointments, refilling prescriptions, and tracking medical expenses), but does not make health care decisions.

(D) Health care agent (HA). An eligible individual (the patient) names an HA in a durable power of attorney for health care documents to make health care decisions.

(E) Legal guardian (LG). An LG is appointed by a court of competent jurisdiction in the United States (or jurisdiction of the United States) to make legal decisions for an eligible individual.

(F) Special guardian (SG). An SG is appointed by a court of competent jurisdiction in the United States (or jurisdiction of the United States) for the specific purpose of making health care-related decisions for an eligible individual.

(e) Permissions. A sponsor, a sponsor's spouse, and a sponsor's dependent over the age of 18 can manage who has access to their information (i.e., who has access to view and edit their information and who is eligible to act on their behalf). The provisions of this section may be superseded by order of a court of competent jurisdiction.

(1) Sponsor access. Sponsors will automatically have access to the information of all dependents under the age of 18.

(2) Spousal access—(i) Automatic. A sponsor's spouse will automatically have access to the information of all dependent children under the age of 18 whose relationship to the sponsor began on or after the date of marriage of the sponsor and sponsor's spouse.

(ii) Sponsor-granted. The sponsor may grant the sponsor's spouse access to the information of dependent children under the age of 18 whose relationship to the sponsor began before the date of marriage of the sponsor and the sponsor's spouse.

(3) Granted access. A sponsor, a sponsor's spouse, and a sponsor's dependent over the age of 18 may grant access to their information via the My Access Center website in accordance with paragraph (c)(3) of this section. Surrogate access to the information of a sponsor, a sponsor's spouse, and a sponsor's dependent (regardless of age) must be granted via in-person proofing, including the submission of eligibility documents to an operator for approval in accordance with paragraph (d)(2) of this section.

(i) Access granting by a sponsor. Sponsors may grant their spouse access to the sponsor's information and the information of any sponsor's dependents under the age of 18. Access to the sponsor's information and the information of any sponsor's dependents under the age of 18 may not be granted to any other sponsor's dependent, unless that dependent has been identified as a surrogate.

(ii) Access granting by a spouse. Spouses may grant the sponsor access to the spouse's information. Access to the spouse's information may not be granted to any other sponsor's dependent, unless that sponsor's dependent has been identified as a surrogate.

(iii) Access granting by a dependent over 18. A sponsor's dependent over the age of 18 may grant the sponsor and the sponsor's spouse access to the dependent's information. Access to the information of a sponsor's dependent over the age of 18 may not be granted to any other sponsor's dependent, unless that sponsor's dependent has been identified as a surrogate.