South Central VA Health Care Network (VISN 16)

Issue: VA employee posted on Facebook that he had meet one of the original dirty dozen veterans of WW II. The VA employee used the veterans full name in his posting. Update: 04/06/12:Veteran A will receive a notification letter.…

Outcome: Education was provided to staff that Veteran information was not to be shared in social networking sites. Human resources was included for the appropriate administrative action.…

Issue: Veteran A was mailed Veteran B's medication information sheets. Update: 03/30/12:Veteran B will be sent a notification letter.…

Outcome: Educated staff.

Issue: User sent email with personnel action out unencrypted. One of the recipients was chosen incorrectly from the global address list and the mail was sent instead to an individual working with the Navy Department on detachment to the VA at…

Outcome: Individual has been directed to complete PA refresher training.

Issue: A incomplete health benefits renewal was received from Veteran A and it was to be mailed back to Veteran A. Instead, it was mailed to Veteran B whom returned the form back to the outpatient clinic. Update: 03/30/12:Veteran A will…

Outcome: We have reeducated the staff involved.

Issue: The Privacy Officer (PO) received an Outlook message from the Office of Quality, Safety and Value out of Washington D.C. regarding the need for a security report to be filed based on these facts. On 02/06/12, five sets of finger…

Outcome: Letters are in the Director's office for signature . Appropriate actions to be taken by area involved. Letters have gone out to notify individuals see attachment. Individual that is supervisor in the area stated the information never left their building…

Issue: Veteran A was given information on veteran B Update: 03/26/12: Veteran B will be sent a letter offering credit protection services. His full SSN and medical information were disclosed.…

Outcome: Continous Privacy training.

Issue: Employee A received employee B's information on federal insurance benefits, Both has similar names Update: 03/23/12:Employee B will be sent a general notification letter.…

Outcome: Employee notified the sender that they had e-mailed the document to the wrong employee.

Issue: Veteran A received a phone call from Veteran B indicating he received her Request for Outpatient Services from the MEDVAMC. Veteran A informed Veteran B she had received his letter. Veteran A is a VBA employee.This violation was created by…

Outcome: Privacy Officer met personally with clerk concerning mismailings. She states she will be more careful in the future when doing mailings. She is very regretful that the incident occurred. Current on privacy training.…

Issue: A pathology resident reported to her supervisor today that she took the pathology report of five Veterans home with her to prepare for a medical presentation she was going to present today. The documents were in a bag that she…

Outcome: Resident no longer allowed to train at the MEDVA MC.

Issue: Employee A overheard Employee B and C discussing and reviewing a patients information who committed suicide this past weekend. Update: 03/26/12:The Information Security Officer (ISO) and Privacy Officer (PO) will be interviewing the employees to determine the specific information that…

Outcome: Supervisor will counsel employees regarding accessing Veteran records unless they have a need to know the information in the performance of their duties.