J, -  
Voice (617) 565-1340, (800) 363-1019, TDD (til?) 565- [343, (300) 537469?

   

 

 

 

 

 

FAX (617} seamen:th Of?ce for can Rights. Region
JFK Federal Building, Room 1375
Went Center
Boston. MA mas-eon:
FEB 2 0 2w.
{blt?liblmici
IRHI CIPP CIPIG

 

1VHA Privacy Implementation Coordinator

Information Access and Privacy Of?ce

Department of Veterans Affairs-Veterans He th Administration
810 Vermont Ave, NW

Washington, DC 20420

Our Reference number: til-12445663

Deal- and 

On June 12, 2012, the US, Department of Health and Human Services (HHS), Of?ce for Civil
Rights (OCR) received a complaint alleging a violation of the Federal Standards for Privacy of
Individually Identi?able Health Information andfor the Security Standards for the Protection of
Electronic Protected Health Information (45 C.F.R. Parts 160 and 164, Subparts A, C, and E, the
Privacy and Security Rules). Speci?cally, the complaint alleged that an emlaloyee of the
Newington, Connecticut Veterans Administration Medical Center (VAMC) impermissiny
accessed and disclosed his protected health information (PHI) to third parties. These allegations
could re?ect violations of 45 C.F.R. ?164.502(a) and 

 

 

 

 

OCR enforces the Privacy and Security Rules, and also enforces Federal civil rights laws which
prohibit discrimination in the delivery of health and htnnan services because of race, color,
national origin, disability, age, and under certain circumstances, sex and religion.

On July 8, 2013, OCR noti?ed the VAMC of the complaint.

The complainant alleged that his PHI was impermissiny accessed and disclosed by an employee
of VAMC Audiology Department. investigation revealed that the employee in question
did not have a work-related purpose for accessing the complainant?s PHI. OCR received written
assurances from the VAMC that the employee was sanctioned in accordance with the 
policies and procedures. OCR reviewed the policies and procedures regarding uses and
disclosures of PHI and safeguarding PHI, and they appear to be in compliance with the Privacy
Rule.

Transaction (ll-13454990

All matters raised by this complaint at the time it was ?led have now been resolved through the
voluntary compliance actions of the VAMC. Therefore, OCR is closing this case.

determination as stated in this letter applies only to the allegations in this complaint that
were reviewed by OCR.

Under the Freedom of Information Act, we may be required to release this letter and other
information about this case upon request by the public. In the event OCR receives such a request,
we will make every effort, as permitted by law, to protect information that identi?es individuals
or that, if released, could constitute a clearly unwarranted invasion of personal privacy.

If you have any questions, please contact Monika Rushford, Investigator, at
(617) 565-1345 (Voice), 565-1343 (TDD).

Sincerely,

MM

Susan M. Pezzullo Rhodes
Acting Regional Manager