Ems





lawn?!

DEPARTMENT OF HEALTH 3; HUMAN 
Voice (617)555-1340, (Boo) ass-1019. TDD (617} 565- 1343, (soc) sat-ass?
FAX (617} 565-3309, 



Of?ce for Civil Rights, Region I
JFK Federal Building1 Room 1375
Government Center

Boston. MA 112203-0002

Ms. Andrea Wilson, RHIS, CIPP, 

VHS Privacy Implementation Coordinator

Information Access and Privacy Of?ce 10P2C1

Department of Veterans Affairs Veterans Health Administration
810 Vermont Avenue, NW.

Washington, DC 20420

 

 

{blt?libltilicl

 

 

Our Reference number: 01-12-13522?

 

. a . 
Dear Ms. W1lson 

 

 

 

On ##Receipt Date##, the U.S. Department of Health and Human Services (HHS), Of?ce for
Civil Rights (OCR) received a complaint alleging a violation of the Federal Standards for Privacy
of Individually Identi?able Health Information andfor the Security Standards for the Protection of
Electronic Protected Health Information (45 CPR. Parts 160 and 164, Subparts A, C, and E, the
Privacy and Security Rules). Speci?cally, the complaint alleges that an employee, a physician,
impermissiny disclosed the complainant?s protected health information in the registration area.
This allegation could reflect violations of 45 C.F.R. 164.502(a) and 164.530(c) respectively.

OCR enforces the Privacy and Security Rules, and also enforces Federal civil rights laws which
prohibit discrimination in the delivery of health and human services because of race, color,
national origin, disability, age, and under certain circumstances, sex and religion.

On March 12, 2012, OCR noti?ed the Veterans Health Administration of the complaint.

Veterans Health Administration provided us with written assurance of the following:
complainant was seen at the VA emergency room on October 24, 2011; during this visit, a doctor
discussed patient?s condition in the registration area where other patients were present; the doctor
in question has been sanctioned and retrained on proper procedures for having discussions with
patients. The Veterans Health Administration has also trained the other emergency room
personnel on proper procedures. The Veterans Health Administration also provided us with it
policies related to safeguarding patient information as well as its sanctions policy; these policies
appear to comply with the Privacy Rule.

All matters raised by this complaint at the time it was ?led have now been resolved through the
voluntary compliance actions of the Veterans Health Administration. Therefore, OCR is closing
this case.

determination as stated in this letter applies only to the allegations in this complaint that
were reviewed by OCR.

Under the Freedom of Information Act, we may be required to release this letter and other
information about this case upon request by the public. In the event OCR receives such a request,
we will make every effort, as permitted by law, to protect information that identi?es individuals
or that, if released, could constitute a clearly unwarranted invasion of personal privacy.

If you have any questions, please contact Phil Lewis, Investigator, at
(617) 565-1355 (Voice), 565-1343 (TDD).

Sincerely,

QWEW

Peter K. Chan
Regional Manager