,9 
EELTH QFFIQE  THE 
1 Voice (617) 565-1340, [800) 368-1019, TDD (617} 565- 1313, {890} Bil-3'69?

FAX (617} 565-3309.  Of?ce for Civil Rights, Region!
JFK ream: nutter-amount 1875
Gaverlment Center
Boston, MA ems-one:

1 5 2012

 

{bit?lxibM?FHCJ

 

 

 

Ms. Andrea Wilson, RHIA, CIPP, CIPPJG

VI-IA Privacy Implementation Coordinator

Information Access and Privacy Of?ce-lOPZCl

Department of Veterans Affairs-Veterans Health Administration
810 Vermont Ave, NW

Washington, DC 20420

Our Reference number: 11-12793}

 

Dear mimmbm? and Ms. Wilson 

 

 

 

On May 2011, the U.S. Department of Health and Human Services (HHS), Of?ce for Civil
Rights (OCR) received a complaint alleging a violation of the Federal Standards for Privacy of
Individually Identi?able Health Information andfor the Security Standards for the Protection of
Electronic Protected Health Information (45 CPR. Parts 160 and 164, Subparts A, C, and E, the
Privacy and Security Rules). Speci?cally, the complainant, an employee and a patient of the
Manchester Veterans? Administration Medical Center (VA), alleged that his protected health
information (PHI was impermissiny used by his employer. This allegation could reflect
violations of 45 CFR and respectively.

OCR enforces the Privacy and Security Rules, and also enforces Federal civil rights laws which
prohibit discrimination in the delivery of health and human services because of race, color,
national origin, disability, age, and under certain circumstances, sex. and religion.

The complainant alleged that his supervisor impermissiny used his PHI when she accessed the
?Appointment Manager? function of the Veterans Health Information Systems and Technology
Architecture to verify a doctor?s appointment. The VA provided OCR with written assurance of
the following: the employee involved in this incident has been sanctioned according to the 
sanctions policy; staff have been retrained on the requirements of the privacy policy; and
an apology letter has been sent to the complainant.

All matters raised by this complaint at the time it was ?led have now been resolved through the
voluntary compliance actions of The Veterans Health Administration. Therefore, OCR is closing
this case.

 

 

{bli?liblil?llcl

Page 2- and Ms. Wilson 

 

 

 

determination as stated in this letter applies only to the allegations in this complaint that
were reviewed by OCR.

Under the Freedom of Information Act, we may be required to release this letter and other
information about this case upon request by the public. In the event OCR receives such a request,
we will make every effort, as permitted by law, to protect information that identi?es individuals
or that, if released, could constitute a clearly unwarranted invasion of personal privacy.

If you have any questions, please contact Keisha Edwards, Investigator, at
(617) 5654349 (Voice), (617) 565?1343, (800) 537-7697 (TDD).

Sincerely,

Peter K.Chan
Regional Manager