Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Southwest Health Care Network (VISN 18)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on April 2, 2012. Also cited in 228 other reports.
Report ID: SPE000000073592, U.S. Department of Veterans Affairs
Reported Entity: VISN 18 Phoenix, AZ
Issue:
On April 2, 2012, the Patient Advocate reported Veteran A's privacy complaint. He was seen in the Emergency Department on March 26, 2012, when he was provided with a CD containing Radiology images. The Privacy Officer called Veteran A back for more information. Veteran A realized the CD belonged to Veteran B with the same last name, different first name. CD also had last 4 of SSN. Both Veterans have a very common last name. The anatomical structures were a wrist film versus chest x-ray. He was able to return the CD to an Emergency Department nurse within the past hour on April 2. Per the Veteran, there was no other exposure of the CD. The nurse was able to provide him with the correct CD for wrist surgery in the morning. ED nurse manager was notified of the event and started an investigation. Update: 04/04/12:On further investigation, Veteran B's full SSN was disclosed. Veteran B will be sent an offer for credit protection services.
Outcome:
Supervisor counseled staff on this event and corrective steps to address all outgoing CD with privacy disclaimer, Veteran last name and last 4 on CD with exam performed. She also emailed directions to staff and will develop an SOP. New labeling protocol in place.