Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Mid South Healthcare Network (VISN 9)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on August 10, 2012. Also cited in 328 other reports.
Report ID: SPE000000079063, U.S. Department of Veterans Affairs
Reported Entity: VISN 09 Nashville, TN
Issue:
The Privacy Officer (PO) at the Nashville Campus)was contacted by Veteran A regarding the following:Veteran A is followed at the Murfreesboro Campus. Today, Veteran A received test results in the mail from his Primary Care Provider. The information also included abnormal test results which belong to Veteran B. Veteran Bs personal identifiable information includes his name and lab results. The PO made arrangements for Veteran A to return Veteran Bs information to our office via mail and will follow-up to determine who mis-mailed this document. The PO was unable to determine Veteran Bs identify based upon the information provided by Veteran A but the PO spoke with a radiology clerk who was able to confirm Veteran Bs identity by the medical imaging case numbers. It is unclear by reading the CPRS notes, if Veteran B has been notified of the abnormal test results or if follow-up was initiated. Veteran Bs tests were ordered by his pc provider (Provider C) but the letter regarding the abnormal results was completed by Provider D who was covering during Provider Cs absence. Both providers are on leave today. Chief, Medical Officer (Murfreesboro Campus) is gone for the day. PO contacted Chief, Ambulatory Care who will contact Veteran with the results. Update: 08/13/12:Veteran B will receive a HIPAA letter of notification.
Outcome:
8/22/12 - Upon inquiry, the Privacy Officer found the primary care provider qued Veteran B's notification letter to print in the Business Office (Murfreesboro Campus) where it was manually folded by a clerk and inadvertently placed in an envelope being mailed to Veteran A. The Privacy Officer spoke with the Veteran A and made arrangements for the document to be returned to VA TVHS. The PO was unable to identify the specific clerk. HIPAA notification letter mailed.