C.W. Bill Young VA Medical Center

Issue: Veteran A was given Veteran B's appointment list. Veteran A realized the error and returned the document to VA custody.

Outcome: 07/03/14: The Incident Resolution Service Team has determined that Veteran A will be sent a notification letter.…

Issue: Authorization was received, processed and medical records were released. However, the authorization did not specifically authorize the disclosure of 7332 information.

Outcome: 07/02/14: The Incident Resolution Service Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: It was noted by a night nurse on an inpatient mental ward that Veteran A had Veteran B's medication list. Veteran B was discharged from the inpatient mental ward last week. Veteran A has dementia and is confused. It is…

Outcome: 06/25/14: The Incident Resolution Service Team determined that this was not a data breach. This falls under the VA Breach Criteria 1.B.(iii) A disclosure of Sensitive Personal Information (SPI) where VA has a good faith belief that an unauthorized person…

Issue: Veteran A reported to the Privacy Office that he received a copy of Veteran B's diagnostic test results in error by mail. A copy of Veteran B's letter was attached to Veteran A's letter. Veteran A stated he would return…

Outcome: Data not available.

Issue: An ROI clerk received a request for medical records from a law office for the purpose of a social security disability matter. The law firm represents the Veteran and the request was accompanied with signed authorization of the Veteran. However,…

Outcome: 06/16/14: The Incident Resolution Service Team has determined that Veteran A will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: An administrative supervisor reported that one of the clerks had allowed her child to visit with her behind a VA workstation while VA sensitive data was displayed on both the computer on the desktop

Outcome: 06/12/14: The Incident Resolution Team has determined that there was a policy violation. While there was an unauthorized access/disclosure of data, it has been determined that the incident has a low probability of a risk of compromise.…

Issue: A new VA employee at the Lee County Healthcare Center submitted physical records of banking information to the Human Resources (HR) Department at CW Bill Young VAMC as requested. HR is stating that are unable to locate the information and…

Outcome: 06/04/14: The Incident Resolution Team determined that the employee will receive a letter offering credit protection services since his name and date of birth were compromised.…

Issue: Veteran alleged that a contracted nursing agency disclosed his diagnosis to other residents. The contracted nursing agency conducted an investigation. PO contacted the Director of the contracted nursing agency for further details. Residents were interviewed and confirmed that an employee…

Outcome: 06/02/14: The Incident Resolution Team has determined that Veteran A will be sent a notification letter.…

Issue: Employee Veteran requested a copy of electronic access log and is alleging that two co-workers access record with authorization. Privacy Officer reviewed the record and determined this information to be accurate.…

Outcome: 05/30/14: The Incident Resolution Team has determined that the employee will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Release of Information ordered Veteran A's record out of the Federal Record Center (FRC) for copying. The FRC delivered the records to the Lee County VA Healthcare Center. The records were received and signed for by mail room staff. Mail…

Outcome: 05/15/14: The Incident Resolution Team has determined that Veteran A will be sent a letter offering credit protection services.…