C.W. Bill Young VA Medical Center

Issue: VA employee discovered a "Designation of Beneficiary" for another individual scanned into his eOPF. The VA employee is unable to find his "Designation of Beneficiary" form in his eOPF and is concerned that it may have be scanned erroneously also.

Outcome: 04/07/14: The Incident Resolution Team has determined that no data breach has occurred. The document was seen only by VA trusted agents.…

Issue: Veteran A was given Veteran B's appointment list. Veteran B realized the error before leaving VA and returned the document to VA custody. The appointment list contained Veteran B's name, partial SSN and appointment information.…

Outcome: 04/04/14: The Incident Resolution Team has determined that there was a policy violation. While there was an unauthorized access/disclosure of data, it has been determined that the incident has a low probability of a risk of compromise.…

Issue: Veteran A received Veteran B's medication in the mail. Veteran A realized the error and returned the medication to VA.

Outcome: 03/20/14: The Incident Resolution Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Employee A's competency panel personnel record was mis-filed into Employee B's electronic personnel file. The two employees have the same last name and are married. The document contained Employee A's full name and salary information.…

Outcome: 03/13/14: The Incident Resolution Team (IRT) determined that Employee A will receive a general letter of notification. VA employees are trusted, take the mandatory Security and Privacy Awareness Training and sign the Rules of Behavior so no credit protection services…

Issue: Veteran A's family member reported that Veteran A received a copy of Veteran B's lab report in the mail. The family member reported to the VA that the information would be shredded.…

Outcome: 03/04/14: The Incident Resolution Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Release of Information Office released a deceased Veteran's medical record (including 7332) in response to a written request signed by a SSgt of a local Police department. The purpose of the request was for the local Police to "get an…

Outcome: 02/21/14: A letter will be sent to the Veterans Next of Kin.…

Issue: Veteran A received a copy of Veteran B's agency correspondence which discussed Veteran B's care to include diagnoses. The Privacy Officer (PO) is unable to determine all identifiers until the information is retrieved.…

Outcome: 02/21/14: The IRT is waiting for the PO to report the remainder of the identifiers which were disclosed. 03/03/14: The Privacy Officer recieved the letter. The letter contained full name and medical conditon. Veteran B will be sent a HIPAA…

Issue: A Housekeeping supervisor discovered paper records containing PII and PHI on VA grounds. Documents contained the full name and full SSN of 8 Veterans, the First Name, the Full Name and last 4 SSN of 2 Veterans and the First…

Outcome: 02/19/14: The Incident Resolution Team has determined that the eight Veterans whose SSN was at on the documents will be offered credit protection services and the two Veterans whose full names and last four will be sent HIPAA notification letters.…

Issue: Veteran A received Veteran B's application for disabled person parking permit in the mail. Veteran B received Veteran A's application for disabled person parking permint in the mail. It is believed the forms were attached to the wrong cover letters…

Outcome: 02/03/14: Each Veteran will be sent a letter offering credit protection services due to the disclosure of the combination of name and date of birth.…

Issue: A VA employee alleges his ex-wife/employee admitted to accessing his medical record.

Outcome: 02/03/14: The Veteran willl be sent a letter of notification.…