C.W. Bill Young VA Medical Center

Issue: Veteran A reported to the patient call center that he received his appointment letter by mail and attached were two separate appointments for Veteran B. Veteran A provided the call center with Veteran B's information and then was instructed to…

Outcome: 06/23/15: The Incident Resolution Service Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Employee/Veteran A reported to the Privacy Officer (PO) that Employee B had accessed her record without the authority to do so. The PO obtained a copy of the Sensitive Patient Access Report (SPAR) and was able to verify that Employee…

Outcome: 06/18/15: The Incident Resolution Service Team has determined that Veteran A will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Business Office Service (BOS) reports that 71 Veteran authorizations being processed for January are unable to found. BOS is conducting a search to locate the documents.…

Outcome: 06/17/15: The Incident Resolution Service Team has determined that 71 Veterans will be sent letters offering credit protection services. If the search yields a different count, the total will be adjusted accordingly. UPDATE 07/6/15: Totals updated to 24 CPS and…

Issue: The Health Administration Service (HAS) received a call regarding the clinic being overbooked. When the management called Veteran A to inform him of the event, he acknowledged that he received Veteran B's appointment list upon enrollment. Veteran A did not…

Outcome: 06/11/15: The Incident Resolution Service Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: A request was received for Veteran A's pulmonary function test. The information was faxed directly from Document Storage Systems (DSS) using the right fax number. However, Veteran B's information was faxed in error. The recipient contacted the Release of Information…

Outcome: 06/09/15: The Incident Resolution Service Team has determined that Veteran B will be sent a letter offering credit protection services due to full SSN being disclosed.…

Issue: Upon internal inspection, the Information Security Officer (ISO) discovered that Employee A accessed her spouse's Veteran electronic medical record. Access was not within the function of Employee A's assigned job duties.…

Outcome: 05/18/15: The Privacy Officer states that the employee explained this access as her checking her husband's record "to check on prescription requests as he had been having problems obtaining his refills in a timely manner through the pharmacy system." He…

Issue: A Release of Information (ROI) clerk processed a request on Veteran A disclosing records to an automotive insurance company, however the authorization did not cover the release of USC 7332 and this information was disclosed.

Outcome: 05/12/15: The Incident Resolution Service Team has determined that Veteran A will be sent a U.S.C. 7332 notification letter due to U.S.C. 7332 Protected Information being disclosed.…

Issue: Patient A received Patient B's medical records in error in the mail.

Outcome: 05/05/15: The Incident Resolution Service Team has determined that Veteran B will be sent a letter offering credit protection services due to full SSN being disclosed.…

Issue: Veteran A reported to the Bay Pines VA Healthcare System's Patient Advocates Office that he received a copy of Veteran B's personally identifiable information (PII). Veteran A was provided an information update form and when he had the opportunity to…

Outcome: 05/01/15: The Incident Resolution Service Team has determined that Veteran B will be sent a letter offering credit protection services.…

Issue: Employee A reported that they inadvertently mailed a complainant response to the wrong address. The address was not changed from an existing template letter. Once the discovery was made the information was corrected and mailed to the appropriate address, however,…

Outcome: 04/30/15: The Incident Resolution Service Team has determined that Veteran A will be sent a notification letter.…