North Florida/South Georgia Veterans Health System

Issue: Veteran A received appointment letters for Veteran B. Veteran A immediately returned the appointment letters to VA. Privacy will further investigate.…

Outcome: 06/12/14: The Incident Resolution Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: A VA employee found a folded document in the VA parking lot this morning that contained VA patient information. The Privacy Officer (PO) will further investigate.…

Outcome: 06/09/14: The Incident Resolution Team has determined that there was a policy violation. While there was an unauthorized access/disclosure of data, it has been determined that the incident has a low probability of a risk of compromise. The information was…

Issue: Veteran A received appointment reminder letter of Veteran B. Veteran A called the Gainesville VAMC Privacy Office to report what he had received, and that he would mail back Veteran B's appointment reminder letter to the Gainesville VA Privacy Office.…

Outcome: 05/30/14: The Incident Resolution Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: A Social worker left her case load on the top of her car and drove off when leaving the home of a Veteran. She returned when she realized her mistake but could not find the case load.

Outcome: 06/02/14: The Incident Resolution Team has determined that thirty (30) Veterans will be sent notification letters.…

Issue: Veteran A was mailed Veteran B X-ray results. Veteran A is mailing the X-ray results that belongs to Veteran B back to the VA clinic. Privacy will further investigate this matter.…

Outcome: 05/22/14: The Incident Resolution Team has determined that Veteran B will be sent a letter offering credit protection services.…

Issue: Union President made a complaint today in a meeting about information released under 7114(b). The document (VA Police Investigative Report) was reviewed by Labor Relations and information spans over the break in the last two pages. The last four and…

Outcome: 04/23/14: After meeting with the Service Chief and Labor Relations today it has been determined that this disclosure was inappropriate. The Privacy Officer updated the ticket from a complaint to an incident. Further review of the document revealed that the…

Issue: ROI clerk mistakenly mailed Veteran A's medical records to Veteran B. Privacy will investigate.…

Outcome: 04/04/14: The Incident Resolution Team has determined that Veteran A will be sent a letter offering credit protection services.…

Issue: CBOC employee reported her supervisor shared her medical condition with her co-workers without her consent. Privacy will further investigate.…

Outcome: 03/31/14: PO update: After review of the statements and CMO's investigation findings, I have determined this complaint is substantiated. It appears that the supervisor shared employee health information without the written authorization of the employee. Recommendation made to CMO to…

Issue: Veteran A was mailed Veteran's B research consent document and Veteran B was mailed Veteran's A research consent document. Privacy will further investigative.…

Outcome: 03/14/14: The Incident Resolution Team has determined that both Veterans will be sent a letter offering credit protection services, as their names and dates of birth were disclosed.…

Issue: Police reported a VA employee has been caught selling Personally Identifiable Information (PII). The Veterans' full SSNs were compromised.…

Outcome: 03/14/14: On 03/13/14, the Gainesville Police Department reported to the Information Security Officer (ISO) that a VA Tele Health Clerk had been selling PII. She was arrested on unrelated domestic charges and admitted to the Gainesville Police Detective to selling…