Martinez Outpatient Clinic and Community Living Center

Issue: Employee accidently provided an employee's home address and phone number to a contractor by the name of Mobility Equipment. Employee is a non-veteran and does not get care at our facility.…

Outcome: 10/16/13: Employee A will be sent a general notification letter.…

Issue: A wife accessed her husbands medical record without a need to know or for official business.

Outcome: 10/07/13: Veteran A will be sent a notification letter.…

Issue: An employee accessed his brothers medical record 32 times between May 23, 2013 and September 26, 2013. The employee was previously informed not to access his brothers records but continued to do so according to a Sensitive Patient Access Record.…

Outcome: 10/01/13: The employee's brother will be sent a HIPAA notification letter due to Protected Health Information (PHI) being accessed inappropriately.…

Issue: The Information Security Officer (ISO) notified the Privacy Officer (PO) that she was reviewing the Sensitive Patient Access Report Log (SPAR) and she identified an employee who has been accessing her husband's medical records.

Outcome: 09/30/13: The husband will be sent a notification letter.…

Issue: A Medical Support Assistant wrote a letter detailing a Veterans full name, DOB and medical diagnosis and provided the veterans problem list to the Veterans spouse without legal authority, no HIPAA Authorization, no Power of Attorney or conservatorship. The wife…

Outcome: 08/20/13: The Veteran will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed without authorization.…

Issue: A Veteran reports that her ex-boyfriend (VA employee) has either accessed her medical record or had a co-worker access her record as the ex-boyfriend told her everything about her past appointments that she shared with her provider.

Outcome: 06/10/13: The ex-boyfriend no longer works at the VA however he still could have another employee accessing the Veteran's information without a need to know. The Privacy Officer (PO) sent an email the employee's supervisor to investigate. 06/17/13: The PO…

Issue: Veteran A was given specimen containers that belonged to veteran B that contained full name and full SSN.

Outcome: 05/14/13: Veteran B will be sent a letter offering credit protection services due to full name and full SSN being disclosed. 09/17/13: Per PO update, it is now two (2) Veterans who will received letters offering credit protection services.…

Issue: An employee reported that a co-worked had accessed her records on nine different times 11/9/09; 4/30/10; 5/3/10; 5/4/10; 10/20/11(5X this day) and 2/1/13 without a need to know or with permission. The employee discovered this when she requested a Sensitive…

Outcome: 05/14/13: Employee A will be sent a notification letter.…