North Florida/South Georgia Veterans Health System

Issue: Veteran A received Veteran B's MRI results in the mail.

Outcome: 09/03/14: The Incident Resolution Service Team has determined that Veteran B will be sent a letter offering credit protection services.…

Issue: The Release of Information (ROI) clerk created and provided a Veteran a CD with her medical records but inadvertently included two other Veteran's medical records on the same CD. The Veteran returned the CD to VA and was provided a…

Outcome: 08/15/14: The Incident Resolution Service Team has determined that both Veterans whose information was disclosed will be sent letters offering credit protection services.…

Issue: Veterans brother alleges VA employee (mother in law of Veteran) inappropriately provided medical condition, diagnosis, and date of admission to her daughter. Privacy will investigate. The Veteran opted out of the facility directory.…

Outcome: 08/26/14: The Incident Resolution Service Team has determined that the Veteran will be sent a notification letter, as the PO stated it cannot be ruled out that VA inappropriately disclosed information.…

Issue: A Pharmacist at this facility reported Veteran As medication was inadvertently provided to Veteran B. Veteran B did not take the medication and returned the medication to the VA. Privacy will investigate.…

Outcome: 08/11/14: The Incident Resolution Service Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: A Pharmacist at this facility reported Veteran's A topical medication was mailed to Veteran B. The Pharmacist has made several attempts to contact Veteran B and will continue. Privacy will further investigate.…

Outcome: 08/05/14: The Incident Resolution Service Team has determined that Veteran A will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: A VHA Research employee accidentally mailed two payment vouchers to a grants specialist at the University of Florida. The UF employee contacted the VHA who promptly retrieved the vouchers.

Outcome: 08/04/14: The Incident Resolution Service Team has determined that there was a policy violation. While there was an unauthorized access/disclosure of data, it has been determined that the incident has a low probability of a risk of compromise.…

Issue: The Union President is requesting Privacy Officer (PO) to look at the access of some of the employees listed on the Sensitive Patient Access Report (SPAR). She is not a Veteran and does not receive care at VA.…

Outcome: 08/13/14: The PO reports that an employee did access another employee's records inappropriately. The Incident Resolution Service Team has determined that the employee whose information was reviewed will be sent a letter of notification.…

Issue: Research Principle Investigator reported as part of a routine mail-out to pre-screened participants that the Veterans name mis-matched the address on approximately 23 mailings during a mail merge failure. The only information disclosed was the Veterans name which was sent…

Outcome: 06/30/14: The Incident Resolution Service Team has determined that no data breach has occurred. There was Personally Identifiable Information (PII) involved, but not the required criteria for credit protection services or HIPAA notification.…

Issue: Two parking permit forms were mailed out at the same time, Veteran "A" received Veteran "B" and Veteran "B" received Veteran "A". The VA employee involved discovered the mis-mailing and contacted both Veterans who immediately returned the form. Privacy will…

Outcome: 06/26/14: The Incident Resolution Service Team has determined that two Veterans will be sent a letter offering credit protection services due to the combination of full name, address and date of birth being disclosed.…

Issue: An electrocardiogram SD memory card was lost. The card possibly contained information on 30 veterans, with SSN (24 of them had the full SSN, 5 had the last 4 of the SSN, and 1 did not have the SSN) along…

Outcome: 06/13/14: The Incident Resolution Service Team has determined that 24 Veterans will be sent letters offering credit protection services and six will be sent notification letters.…