Overton Brooks VA Medical Center

Issue: It was reported that VA Fee employee faxed a progress notes with the patient's HIV status to a non-VA healthcare provider in which we are sending the patient to. We do not have an authorization from the patient to disclose…

Outcome: 11/19/14: The Incident Resolution Service Team has determined that the Veteran will be sent a U.S.C. 7332 notification letter due to U.S.C. 7332 Protected Information being disclosed.…

Issue: A VA Employee accessed a Veteran/Employee's medical record on one occasion within one year. The Veteran/Employee is the spouse of the VA Employee. Investigation in progress.…

Outcome: 10/29/14: Employee stated that she did access her husband's medical record and was not within the scope of her duties. The Incident Resolution service Team determined that the Veteran/Employee will receive a HIPAA notification letter.…

Issue: Provider accidently handed Veteran A's medication sheet to Veteran B. Once provider noticed they contacted Veteran B and Veteran B brought Veteran A's medication sheet back to Community Based Outpatient Clinic (CBOC). Provider shredded the medication sheet before notifying Privacy…

Outcome: 09/10/14: The Incident Resolution Service Team determined that veteran A should receive a letter offering credit protection services since the full SSN was compromised. 09/11/14: The provider called the Veteran B who wrote the other patient's name down so we…

Issue: Veteran A contacted facility stating that he received a C&P packet from Veteran Evaluation Service (a supposed contractor for C&P exams) for Veteran B. Privacy Officer will investigate. Veteran A stated that they did talk to Inspector General because that…

Outcome: 09/16/14: The Incident Resolution Service Team has determined that Veteran B will be sent a letter offering credit protection services.…

Issue: The Information Security Officer (ISO) ran report that showed employee accessed spouse/Veteran/patient medical record. The Privacy Officer's (PO) initial investigation shows it was inappropriate access however has not been confirmed.…

Outcome: 09/03/14: The Incident Resolution Service Team has determined that the Veteran will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Veteran A met the Privacy Officer (PO) in the hallway and handed the PO a discharge note that included Veteran B's protected health information (PHI) to include diagnosis, SSN, DOB, medications and discharge information. Veteran A stated that he received…

Outcome: 07/23/14: The Incident Resolution Service Team determined that Veteran B will receive a letter offering credit protection services.…

Issue: Administrative staff sent a letter meant for Veteran A to Veteran B. The letter stated Veteran A's full name, address and appointment date, time and provider.

Outcome: 07/07/14: The Incident Resolution Service Team determined that Veteran A will receive a HIPAA letter of notification.…

Issue: A Veteran/Employee states that Employee A contacted him asking about his appointment set up, if the time was good and how the appointment went. The Veteran/Employee felt this was wrong and when asked why he was asking, Employee A stated…

Outcome: 06/05/14: From what the Privacy Officer (PO) can tell at the moment, Employee A (clerk supervisor) went into the Veteran/Employee's appointments and then contacted the Veteran/Employee and asked him if the appointment time was satisfactory and how his appointment went.…

Issue: A VA Employee/Veteran requested the Privacy Officer (PO) look into his medical record to see if there was any inappropriate access during his last in-patient stay.

Outcome: 06/04/14: The PO, Information Security Officer (ISO) and Human Resources (HR) have contacted all supervisors and investigated the incident. Three employees inappropriately accessed the Employee/Veteran's record. 06/05/14: The Incident Resolution team determined that the Employee/Veteran will receive a HIPAA letter…

Issue: Occupational Health (OH) discovered that a VA employee's OH medical record is missing. They have looked all over their clinic and cannot find it. The information at risk includes the employee's name, date of birth, full SSN and lab results.…

Outcome: 05/15/14: The Incident Resolution Team has determined that one employee will be sent a letter offering credit protection services.…