Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
C.W. Bill Young VA Medical Center
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on May 12, 2015. Also cited in 111 other reports.
Report ID: PSETS0000119374, U.S. Department of Veterans Affairs
Reported Entity: BAY PINES FL - 516
Issue:
Upon internal inspection, the Information Security Officer (ISO) discovered that Employee A accessed her spouse's Veteran electronic medical record. Access was not within the function of Employee A's assigned job duties.
Outcome:
05/18/15: The Privacy Officer states that the employee explained this access as her checking her husband's record "to check on prescription requests as he had been having problems obtaining his refills in a timely manner through the pharmacy system." He has signed the forms in ROI for the employee as his health care surrogate and to have access to his medical information and to pick up his prescriptions. The Privacy Officer explained that having a signed health care surrogate does not allow her access to the electronic record. The PO asked the ISOs to provide a SPAR report to see if this was an isolated incident or if she did this routinely. Over the last 3 years, the employee has accessed the record mutliple times. The PO is going to contact the Veteran to see if the Veteran was aware of and consented to the accesses. 05/19/15: The DBCT has determined this to be a privacy violation, as the access was outside the scope of the employee's assigned duties, but not a data breach as the spouse was aware of the access.