This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.

Desert Pacific Healthcare Network (VISN 22)

VISN 22 San Diego, CA

Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on April 9, 2013. Also cited in 129 other reports.


Report ID: PSETS0000087728, U.S. Department of Veterans Affairs

Reported Entity: VISN 22 San Diego, CA

Issue:

When a new drug used in the treatment of HIV was added to the facilitys formulary and e-billing system, the individual adding the medication failed to input the code identifying the medication as sensitive for the treatment of a 7332 protected condition. This resulted in an electronic bill being generated for the medication and it being sent to the Veterans' outside insurance company for payment without a signed release of information as is required for 7332 protected information. The pharmacy department is currently auditing the use of the drug and have identified that 73 Veterans who were prescribed the medication. Pharmacy is in the process of identifying how many who were prescribed the drug had bills sent to their insurance companies without a signed Release of Information (ROI). One Veteran was identified initially during an internal audit and the current audit may result in more Veterans being identified. Approximately 10% of our Veteran population has outside insurance which would result in approximately 7 Veterans if 10% of the Veterans prescribed the medication have outside insurance. The results of the audit should be available later today and an update to the ticket will be made when they are available. Update: 04/09/13:The bills went to another covered entity. Notification is not required.04/16/13:An appeal was filed. The DBCT reviewed and granted the appeal based on the evidence submitted that the 7332 information was disclosed without an authorization. This is not a HIPAA violation but a 7332 violation. This affects 3 Veterans. The 3 Veterans will receive a general notification letter.

Outcome:

Notifications sent and training held as well as a review of policies and procedures.

Do you believe your privacy has been violated? Here’s what you can do: