a? We.

 

 

a.

DEPARTMENT or gram a HUMAN or?ch

ea Voice {611) 565-1341]. (soc) 368-1019, TDD (617) 565- 1343, (300) 537-7159?

?aim FAX (611} 565?3809, Of?ce for Civil Rights, Region I
JFK Federal Building, Room 18115
Government Center
AUG 2 2 2011 min. I'th 02203-0001
{blialxiblii?llcl

 

 

 

Coordinator Compliance Investigations
CVS Caremark

One CVS Drive

Woonsocket, RI 02895

 

{bli?llbliillcl

 

 

 

Our Reference number: 11-126749

 

Deal. {bll?liblli?llcl

 

 

 

On April 25, 201], the US. Department of Health and Human Services (HI-IS), Of?ce for Civil
Rights (OCR) received a complaint alleging a violation of the Federal Standards for Privacy of
Individually Identi?able Health Information andfor the Security Standards for the Protection of
Electronic Protected Health information (45 CPR. Parts 160 and 164, Subparts A, C, and E, the
Privacy and Security Rules). Speci?cally, the complaint alleges that the protected health
information of another customer was impermissiny disclosed to complainant when a
prescription for the other customer was ?lled under complainant?s name. This allegation could
re?ect violations of 45 and 

OCR enforces the Privacy and Security Rules, and also enforces Federal civil rights laws which
prohibit discrimination in the delivery of health and human services because of race, color,
national origin, disability, age, and under certain circumstances, sex and religion.

On May 9, 2011, OCR. noti?ed CVS Caremark of the complaint.

CVS Caremark has provided us with written assurance of the following: It has investigated the
incident in question and the Pharmacy Supervisor at the involved store veri?ed that the store had
received a complaint from complainant. Upon verifying the incident had occurred, the Pharmacy
Supervisor retrained pharmacy staff at the store on proper procedures for verifying prescriptions
are ?lled correctly and on patient privacy responsibilities. The prescription was also re?lled for
the correct patient and a note was placed in the affected patient?s ?le indicating that this
disclosure was made.

All matters raised by this complaint at the time it was ?led have now been resolved through the
voluntary compliance actions of CVS Caremark. Therefore, OCR is closing this case.

 determination as stated in this letter applies only to the allegations in this complaint that
were reviewed by OCR.

Under the Freedom of Information Act, we may be required to release this letter and other
information about this case upon request by the public. In the event OCR receives such a request,
we will make every effort, as permitted by law, to protect information that identi?es individuals
or that, if released, could constitute a clearly unwarranted invasion of personal privacy.

lfyou have any questions, please contact Phil Lends, Investigator, at
(617) 565-1355 (Voice), 565?1343 (TDD).

Sincerely,



Peter K. Chan
Regional Manager