Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Mid South Healthcare Network (VISN 9)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on August 15, 2011. Also cited in 328 other reports.
Report ID: SPE000000065749, U.S. Department of Veterans Affairs
Reported Entity: VISN 09 Louisville, KY
Issue:
A Medical Services Assistant (MSA) accessed the records of her co-worker inappropriately. The co-worker asked for a security audit log to find out if the MSA did indeed access the records inappropriately. An interview with the MSA is scheduled for 08/18/11. Update: 08/22/11:The interviews have not been completed. The investigation continues.08/31/11:The MSA did access the records of her co-worker. A summary of the incident has been supplied to the employee's chief and HR for further action if necessary. The co-worker will be sent a letter of notification.
Outcome:
Employee admitted to accessing the records of co-worker. Stated they felt it necessary due to co-workers injury would have something to do with work load. I explained to employee that is not considered in the performance of their duties. In the performance of their duties would be if they had to access the records in order to do their job. Once stated to this employee, they realized that it was inappropriate. Employee apologized to co-worker and stated that this would never happen again. Summary of fact finding provided to employees supervisor and HR for further remediation if necessary. Notification letter attached.