This is a way for your CO to give authorization for other people in the command to receive HIPAA sensitive information. Unless your CO completes this memo, she/he is the only person that can receive HIPAA outside medical.