Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Southwest Health Care Network (VISN 18)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on January 27, 2012. Also cited in 228 other reports.
Report ID: SPE000000071125, U.S. Department of Veterans Affairs
Reported Entity: VISN 18 Phoenix, AZ
Issue:
New Service Chief reports that other staff informed them of employee access to Chief's medical record. Chief requested a SPAR from PO. Based on results of SPAR, employee access is confirmed. Chief has experience in this service line and cannot identify the reason for this access. This access occurred the day after a noted discussion between the two of them. Further notification and investigation to ensue. Update: Supervisor of complaintant notified. Multiple staff in same service line will require an atypical investigational approach with management involvement. Pentad appointment requested for investigation discussion. Notified by another supervisor of staff in SPAR who may also also request their SPAR. Appropriate chain of command investigation resolved. Initiated investigation with appropriate supervisor. Provided both SPAR and ROC after discussion with Supervisor. Appointment with employee pending. Investigation indicates that the employee believes there is a software glitch where the cursor jumps and another Veteran is pulled up in CPRS. They also maintain that they did not really go into the record, just the coversheet. Further investigation with the ISOs regarding touches into the coversheet and being logged on SPARs will be explored further. Discussion with the complaintant regarding progress of the investigation. Explained open status of the investigation which they accept. Discussed with both Chiefs. Facts provided indicate that inappropriate access may have occurred. Various explanations have not been supported otherwise. Provided this to employee's supervisor recommending that she following appropriate disciplinary guidelines. Discussion with supervisor indicates that HR has advised full penalty as appropriate disciplinary actions despite complaintaint's request for lower level discipline. Employee will be give an offical notification letter.
Outcome:
Supervisor indicates that the appropriate level of discipline has been administered with the employee in addition to counseling. VA NSOC will information PO of type of letter to provide to complainant; letter pending. Letter signed. Complainant notified. Discussion of situation pending.