C.W. Bill Young VA Medical Center

Issue: Veteran A reported to Release of Information (ROI) that he received Veteran B's medical records in the mail. Veteran A stated he would return to the hospital with the records he received in error.…

Outcome: 03/06/15: The Incident Resolution Service Team has determined that Veteran B will be sent a letter offering credit protection services.…

Issue: While conducting an internal audit, Release of Information (ROI) discovered that a request for Veteran A was logged under Veteran B's name. An acknowledgement letter had been mailed to the law enforcement agency requesting records, which included Veteran B's full…

Outcome: 03/03/15: The Incident Resolution Service Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Employee Veteran A was given Veteran B's discharge instructions at time of discharge.

Outcome: 03/02/15: The Incident Resolution Service Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Veteran A reported in person to the Release of Information (ROI) department at the Lee County VA Healthcare Center that he received Veteran B's medical records in error. Both Veteran A and Veteran B's information was mailed in the same…

Outcome: 02/27/15: The Incident Resolution Service Team has determined that Veteran B will be sent a letter offering credit protection services due to full name and DoB being disclosed.…

Issue: Employee A reported that he misplaced a print out of incomplete chart reviews for a specific clinic. Employee A was walking through the main hospital when he misplaced the list. The list contained twelve unique Veterans' information and included their…

Outcome: 03/02/15: The Incident Resolution Service Team has determined that twelve (12) Veterans will be sent letters offering credit protection services.…

Issue: As required, the Privacy Officer (PO) conducted the third party/authorization audit for quarter one. On 12/29/14, only 13 of 60 authorizations were located in DocSearch. The authorizations unable to be located were requested from the Business Office by close of…

Outcome: 02/24/15: PO update -- Fourteen authorizations were found and accounted for. The Business Office will continue to look for the nineteen authorizations still unaccounted for. The Privacy Office requested Surgery Service conduct another sweep of their new space and old…

Issue: Veteran A requested completion of a medical report form by the VA provider for the Department of Highway Safety & Motor Vehicles. Veteran A indicated that the completed form should be mailed to his home address. The Release of Information…

Outcome: 02/20/15: The Incident Resolution Service Team has determined that Veteran B will be sent a 7332 notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: The healthcare system Safety Manager contacted the Privacy Office after discovering that Employee A emailed VA sensitive information to his/her personal non-VA attorney. The information included an incident report pertaining to Employee B and internal agency records regarding a recent…

Outcome: 02/18/15: The Incident Resolution Service Team has determined that employee B will be sent a letter offering credit protection services.…

Issue: Windmoor Healthcare of Clearwater, a non-VA provider contacted the Release of Information (ROI) department to report a privacy concern. Windmoor received eleven different non-VA records from the Bay Pines VA Healthcare System (BPVAHCS) on eleven unique Veterans. The BPVAHCS' ROI…

Outcome: 02/23/15: All parties involved are HIPAA covered entities, and the documents have been returned to VA intact. The Incident Resolution Service Team has determined that this was an unathorized disclosure, but there is a low risk of compromise.…

Issue: Employee/Veteran A received a copy of Veteran B's lab results in addition to their own medical records by mail. Employee/Veteran contacted the Privacy Officer to report the event. The lab results contained abnormal findings, along with the Veteran's full name…

Outcome: 02/11/15: The Incident Resolution Service Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…