Rocky Mountain Network (VISN 19)

Issue: Veteran A received medication in the mail intended for Veteran B who has the same last name. Veteran A called as soon as he received the medications in the mail, and realized that it wasn't his. He has returned the…

Outcome: This was the 3rd violation by the same employee, so the pharmacy service chief will be doing mitigation and re-education and informing the privacy office of the final actions.

Issue: The VA Police found physical documents in an unsecured drawer. Update: 05/17/11:The documents were located unsecured in the lobby of the medical center, at the information desk. They were unsecured for several days over the weekend. The documents included 56…

Outcome: Privacy Officer recommends disciplinary action to employee responsible for not safeguarding PHI.

Issue: VA Police while conducting after hours foot patrol found Protected Health Information (PHI) documents in a cardboard box not properly disclosed. Update: 05/10/11:Forty (40) individuals will receive letters offering credit protection services due to full name and full SSN being…

Outcome: Recommendation from PO that employees involved must retake privacy training and reprimand actions must be followed through by supervisor and HR specialist.

Issue: A VHA employee complained that a co-worker accessed his sensitive record based on a copy of Access Log Report. Update: 10/18/11:The ticket was reopened and changed to an incident. The complainant made a complaint to HHS OCR and they forwarded…

Outcome: PO recommends disciplinary action if privacy violation has been identified...accessing another co-worker's record.

Issue: A clipboard containing personally identifiable information (PII) and protected health information (PHI) on 4 different Veterans, was found in an unlocked, unattended physicians' team room this morning. The clipboard was left in this team room, after clinic, overnight and it…

Outcome: 4/29/11 - The privacy issue was discussed in detail with the employee and counseling was given. The service staff was reminded of the importance of patient record privacy issues, specifically, no patient information should be left unattended in this room…

Issue: A VA provider cleared out her office. She boxed up all of the documents in her office and placed them in a public hallway. She told a VA employee to take them from the hallway and throw everything away. A…

Outcome: I was informed by the Director the provider received a suspension. Letters have been sent to all Veterans involved. I have attached a copy of one letter.

Issue: A Patient's appointment letter was mailed to a local business. The appointment letter contained the patient's name, home address and the patient's appointment information. Update: 04/22/11:The patient will be sent a notification letter.…

Outcome: Training is being provided station wide on PHI/PII and rules of behavior.

Issue: A VA employee faxed patient information to the Wyoming Health Department. The information contained 38 U.S.Code 7332 information about the patient's drug abuse. Update: 04/14/11:One Veteran will be sent a letter of notification.…

Outcome: HR is involved with process. I educated ER staff and will began classes at staff meetings

Issue: Fifteen (15) Veterans Identity Cards (VIC) were found on the flight line at the airport. The original mailing box had been crushed and the contents were laying out on the tarmac. The address and the return address on the box…

Outcome: 16 Credit Monitoring letters were sent out on 4/13/11 - A redacted copy of 1 of these letters was sent to the VAIRCT mailbox so this ticket could be closed.Informed the HEC of this incident.

Issue: During the Environment of Care weekly rounds, the Information Security Officer (ISO) discovered a pile of papers on a conference room table in an unlocked and open conference room. The documents included 3 patients' consult requests, one print out of…

Outcome: Resolution: The staff that uses the printer was re-educated in removing documents from printers immediately after printer. The facility leadership determined that the printer would be removed from the conference room, which is unattended, and moved to a secure location…