Atlanta VA Health Care System

Issue: A VA employee who is also a patient complained that an ex-friend may have gone into her CPRS without a need to know. A sensitive access log was run and did contain the name of the ex-friend who is also…

Outcome: 08/14/14: The Incident Resolution Service Team has determined that the employee will be sent a notification letter.…

Issue: Employee A who is assigned to the mailroom acquired the Personally Identifiable Information (PII) of Veteran/Employee B without his consent. Employee A used the information to get a Georgia drivers license and then registered a car using the false identification.…

Outcome: 10/10/13: Employee A will be sent a letter offering credit protection services.…

Issue: A patient requested a letter from her provider and presented the letter to her work at a private company as a work reference. The Release of Information (ROI) was only for a specific medical condition however the provider included other…

Outcome: 08/08/13: The patient will receive a HIPAA letter of notification.…

Issue: A Patient profiles list dropped out of VA employee lab coat

Outcome: 06/28/13: The list contained medication information for nine Patients. Each patient will be sent a letter of notification.…

Issue: The Research Compliance Officer requested report on a Research Study provider who failed to complete the HIPAA authorization correctly. The PI willingly reported an additional study having the same issues. Information included date of birth, last 4 SSN, admission and…

Outcome: 06/26/13: Thirty-Seven (37) Veterans will be sent a notification letter.…

Issue: Information was faxed to a wrong recipient. The information was intended to be sent to a non-VA medical center.…

Outcome: 05/13/13: Due to date of birth and medical information being exposed, Veteran A will be sent a letter offering credit protection services.…