Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Phoenix VA Health Care System
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on May 15, 2014. Also cited in 102 other reports.
Report ID: PSETS0000104226, U.S. Department of Veterans Affairs
Reported Entity: PHOENIX AZ - 644
Issue:
Today, 05/15/14, VA Police contacted the Privacy Officer(PO) after a search of employees office revealed possession of unsecured personnel records from another VA medical center. The personnel records contained full employee names, SSNs, and other personal data fields. Additional agency documents were recovered consisting of assorted emails, policies, or other records. Copies of documents and VA Police report will be provided to the PO after materials are processed. Additional notification and investigation, to ensue.
Outcome:
05/27/14: The employee did have a business need to have the documents when they were employed at the other VA medical center. They should not have held on to them once they left. The police did not disclose why they searched the office and the privacy findings are not related to why the police conducted the search. Looks like probably a policy violation but I left it on because the police are involved, just in the event this turns into something more. 06/02/14: HR Staff and Chief at Amarillo VA have completed their investigation. They have determined that there are emails and VISN documents which would have been appropriate for their past employee to take with her upon transfer to this facility, given the same or similar position. The possession of other facility documents, which are sensitive, were not permissible possession at this facility. The remaining set of documents which contained employees' full SSNs are a privacy incident. There was not permission for the employee to have possession of these documents after separation from that facility. Amarillo VA provided PO with the employee clearance slip indicating understanding of civil and criminal penalties for misuse of Federal agency documents; and, that she had none in her possession at the time of her departure from that facility. This information was relayed to our VA Police Investigator who indicates criminal charges will be filed. We asked that staff who were involved in the investigaiton at the Amarillo VA be instructed in the highly sensitive nature of this ongoing investigation. The information involved two employees.