VA Sunshine Healthcare Network (VISN 8)

Issue: Veteran complained that a former co-worker, now a VA employee, was divulging her PII to one of the Veteran's co-workers. The Veteran stated that she overheard the co-worker speaking to the VA employee and that the VA employee provider her…

Outcome: Employee terminated.

Issue: Veteran A's medical records were mailed to Veteran B. At this time it appears that Veteran B's medical information may have been mailed to the Veteran A. Further investigation to follow. Update: 07/09/12:It is unknown whether Veteran B's medical records…

Outcome: Employee has undergone additional training. Document recovered.

Issue: Veteran A received diagnostic test results (lab work) and a pre-appointment notification letter intended for Veteran B. Update: 06/28/12:Veteran B will be sent a letter of notification.…

Outcome: Veteran A mailed the information to Veteran B. Staff have been reminded of the procedures for mailing information. In this case, it appears that this was caused by human error, as there was no malicious intent.…

Issue: Around 1245 PM today a family member visited the Patient Representative's office with an issue concerning her son (Veteran A). During our discussion she pulled out numerous documents and spread throughout the desk. After our discussion she gathered her papers…

Outcome: Immediate action was taken to remove sensitive documents from the desk while a visitor is present. Current workload is now contained in a binder. The employee involved completed re-training on Privacy and Information Security. The office environment was reviewed and…

Issue: Veteran's Service Organization representative was provided print-screens of four patient's C&P appointment information by a VA employee without authorization of the patient. The print-outs contained the Patient's full name, full SSN, DOB, and appointment dates and times. Update: 06/26/12:Four (4)…

Outcome: Training provided to staff involved as well as disciplinary action recommended by PO for individual directly involved in breach.

Issue: Veteran A called to say that he received Veteran B's lab results in the mail. Both Veterans share the same exact name, but different SSN's. Update: 06/25/12:Veteran B will be sent a letter offering credit protection services, as his full…

Outcome: All employees are being advised to carefully crosscheck last four of SSN when making VISTA entries.

Issue: Veteran A recieved by mail a copy of Veteran B's authorization for outpatient services. The letter contains Veteran B's full name, last four of SSN, home address and diagnosis. The information was retrieved by the medical facility. Update: 06/22/12:Veteran B…

Outcome: All FEE staff were provided additional education by the Privacy Officer to include applying additional safeguards when handling PII. Supervisors were included, unable to determine employee responsible for event, therefore HR was not contacted.…

Issue: A Employee/Veteran was having surgery performed at the facility and another VA Employee was the recovery room when he awoke asking questions related to his surgery. The employee had no reason to be in the room, was not a part…

Outcome: The employee who inapproriately used this information was provided addtional education by the Privacy Officer. This event has been reported to human resources by employees supervisor and is awaiting further action. HIPAA Notification Letter has been mailed to the affected…

Issue: An VA Employee misplaced a copy of a Veteran's consult request for procedure. The employee had it folded up in a lab coat and it when the employee went to retrieve, it was missing. Update: 06/20/12:Veteran A will be sent…

Outcome: It has been stressed to staff the importance of protecting/securing PII in all aspects. Employee's supervisor has been informed and credit monitoring letter was mailed to the affected Veteran.…

Issue: Veteran A received an appointment notification letter intended for Veteran B. Update: 06/18/12:Veteran B will be sent a notification letter. Veterans B's name and appointment information were disclosed.…

Outcome: Staff has been reminded to protect the safety of the patient information in the mailing process. Unfortunately, it was caused by human error and the Florida humidity (papers sticking together). No malicious intent.Notification letter mailed to the Veteran 6/21/12.Notification letter…