Tennessee Valley Healthcare System

Issue: On 07/31/014, Veteran A picked up a large packet of his medical records from the Release of Information (ROI) Office. When Veteran A got home, he took a while to start reviewing his medical records. Upon reviewing those medical records,…

Outcome: 08/08/14: The Incident Resolution Service Team determined that Veteran B will receive a letter offering credit protection services.…

Issue: On 08/06/14, the Privacy Officer, Nashville Campus, was notified of the following incident: On 08/04/14, Veteran A presented to the Outpatient Pharmacy, Nashville Campus, to pick up his medications at the window. Instead, he was given medication belonging to Veteran…

Outcome: 08/07/14: The Incident Resolution Service Team determined that Veteran B will receive a letter offering credit protection services, since hsi full name and date of birth were compromised.…

Issue: On Saturday August 02, 2014, at 8:19 a.m., the Administrative Officer of the Day (AOD) was given an End of Shift Report, pertaining to unit 2N, which had been found on the bench outside of the Emergency Department (ED), Nashville…

Outcome: 08/11/14: The PO is investigating whether or not the cameras in the area could determine: 1) how long the information was on the bench and 2) If anyone accessed the information. 08/12/14: After review of the camera footage, neither of…

Issue: On July 30, 2014, Veteran A personally appeared at the VA Cookeville Outpatient Clinic to report that he had received two (2) separate letters addressed to him; however, also in the envelopes were a VA Form 10-3542, Veteran/Beneficiary Claim for…

Outcome: 07/31/14: The Incident Resolution Service Team has determined that Veteran B will be sent a notification letter.…

Issue: On July 28, 2014, a Veteran, who is also an employee of TVHS, obtained a copy of a Sensitive Patient Access Report for the period of October 1, 2013 to July 27, 2014. Today, July 31, 2014, the Veteran/Employee contacted…

Outcome: 08/15/14: Two of the employees who accessed the records did have justification, but the third did not. The Incident Resolution Service Team has determined that the employee will be sent a HIPAA notification letter.…

Issue: On 7/23/14, a Veteran reported the following incident to the Patient Advocate, Nashville Campus: On July 14, 2014, an Employee, Prosthetic Clinic, Nashville Campus, openly discussed this Veteran's equipment needs for his erectile dysfunction in front of other Veterans and…

Outcome: 07/24/14: The Incident Resolution Service Team has determined that Veteran A will be sent a notification letter.…

Issue: The Supervisor, Release of Information (ROI), notified the Privacy Officer (PO), Nashville Campus, of the following incident: A Clerk in the Release of Information (ROI), Nashville Campus, inadvertently sent copies of medical records to a Paralegal Agency on the wrong…

Outcome: 07/22/14: The Incident Resolution Service Team has determined that Veteran B will be sent a letter offering credit protection services due to full SSN being disclosed.…

Issue: A Patient Services Assistant (PSA), Nashville Campus, contacted the Privacy Officer (PO), Nashville Campus, to report the following incident: A PSA, Nashville Campus, received an unencrypted email from a Veterans daughter in which she requested assistance with enrolling her father…

Outcome: 07/11/14: The Incident Resolution Service Team has determined that Veteran A will be sent a letter offering credit protection services.…

Issue: The PO received an email from our VA Chattanooga Outpatient Clinic. They informed the PO that a Veteran reported to their clinic today and stated he received documents/records belonging to another Veteran and turned those records into the Nurse Manager…

Outcome: 07/03/14: PO update: 7/2/14 - PO received the documents that were returned to the VA Chattanooga Clinic. Upon reviewing, it was determined that the Release of Information Section processed a request; however, they mailed Veteran's B information to Veteran A.…

Issue: On 06/05/14, a Fee Basis employee queued several Preliminary Fee Remittance Advice Reports to an incorrect printer in the Business Office area. The printer (Bizhub) where the reports were queued was checked at the end of the business day and…

Outcome: 06/09/14: The Incident Resolution Team has determined that there was a policy violation. While there was an unauthorized access/disclosure of data, it has been determined that the incident has a low probability of a risk of compromise. This was only…