VA Midwest Health Care Network (VISN 23)

Report ID: PSETS0000084538, U.S. Department of Veterans Affairs

Reported Entity: VISN 23 Minneapolis, MN

Issue:

A physician in a Minneapolis VA Healthcare System Clinic had seen by a patient. During the visit it was determined that a form was required to be completed. The physician left the room to obtain or to fill out the form. The physician failed to logoff from his workstation which displayed a CPRS data from a patient that he had treated earlier. An X-ray for the earlier patient was also visible on a PACs workstation in the same room. When the physician returned to the room, the current patient made a declaration that she had taken a photograph of the x-ray and if the physician had not filled out the form for her, she would have reported the physician for a HIPAA violation. She then displayed her cell phone and deleted what she told the physician was a picture of the x-ray. Update: 01/11/13:Patient B and C will be sent a letter offering credit protection services.

Outcome:

Sent to contracting for letter of warning to be sent. Also, contract provider is required to retake Privacy and Information Security training.

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: PSETS0000084578