Clement J. Zablocki Veterans Affairs Medical Center

Issue: Two patients' information was scanned into Patient A's chart. A first party disclosure to Patient A included Patient B's information before it was removed from the chart. Have been unable to contact Patient A to get information back to destroy.

Outcome: 08/29/14: The Incident Resolution Service Team has determined that Patient B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: An unopened envelope was returned to VHA with a patient's full name, full SSN, and full DOB as mailing address placed on the front of the envelope. The letter was sent on August 22, 2014, and returned from USPS on…

Outcome: 08/26/14: The Incident Resolution Service Team has determined that the patient will be sent a letter offering credit protection services due to Full SSN exposed.…

Issue: Several Veterans returned letters postmarked on 08/22/14 that contained a generic letter outlining the new facility procedures regarding opioid treatment. The letters contained the Veterans' correct street address, but were paired with different names of other Veterans. It is unknown…

Outcome: 08/26/14: The letter is a form letter that describes the new facility processes that surround a Veteran having an opioid prescription. The letter itself contains no identifiable information. However, each incorrect recipient is getting another Veteran's name on the envelope,…

Issue: An Ambulatory Procedure Center daily check sheet was found in the hallway on floor of the unit by an employee who turned the sheet into the Lab service, nearby. Of note, last checked-off procedure was at 12:45 PM, today, and…

Outcome: 08/18/14: It looks like this was the "almost-worst-case" scenario. The Privacy Officer (PO) received a notification from the staff member who received it from another employee that essentially did a drive-by. This list was found in a stairwell open to…

Issue: VA Employee, working with Patient who is fugitive felon, printed copy of proof for Patient from email on 8/1. Unfortunately, email also contained four other Patients' names and full SSN's - who are also fugitive felons. Veteran returned the email…

Outcome: 08/06/14: The Incident Resolution Service Team has determined that the four Patients will be sent letters offering credit protection services. 8/8/14: Update: Per the PO there are five affected individuals.…

Issue: Patient A was discharged from the hospital earlier this date. When unpacking belongings at home, Patient A and Patient A's wife found 16 other Patients' inpatient documentation, including kadexes and other documentation unknown as Patient A's wife is not aware…

Outcome: 07/21/14: The 16 other Patients will receive HIPAA letters of notification.…

Issue: Noted by County DA's Office that on 8-9-13, disclosure of treatment compliance update was sent beyond the expiration of the authorization created by VA VJO SW and patient. Authority was good through May 2013, but disclosure happened past such date,…

Outcome: 07/14/14: The Incident Resolution Service Team has determined that Veteran A will be sent a notification letter.…

Issue: Veteran complains that on November 20, 2013, at about 8:45 AM, local Police called into the facility and queried the identity of a Veteran as an Employee of the facility. Employee that received the call purportedly stated that the named…

Outcome: 06/13/14 According to the PO: "Originally, when the Veteran approached my office, he FOIA'd for a record of the phone call to our facility's VA Police from the local Police department. We had nothing. Then, over time, he was asking…

Issue: Patient A received both Patient A's and Patient B's medications by mistake as a result of a VA Pharmacy Technician placing all of the medications into same bag. Patient A noticed the additional medication at home, and did not open…

Outcome: 06/11/14: The Incident Resolution Team determined that Patient B will receive a HIPAA letter of notification, since his name and medication information were compromised.…

Issue: VA camera containing pictures of facial scars for at least 8 Veterans was reported to VA Police to be lost/stolen by Supervisor of Compensation and Pension unit on 5-14-14. Supervisor is unsure as to where the camera is, and is…

Outcome: 05/30/14: The camera did not contain full face pictures. Only pictures of scars. 06/02/14: It was later discovered that the pictures alternated with pics of the 10-3203 consent forms, complete with full name and SSN of the 8 Vets.…