Breach Occurs After Health System Donates CDs with PHI

The donation to children’s art projects of compact discs that were no longer needed has caused a breach of protected health information at Virginia Commonwealth University Health System.


The donation to children’s art projects of compact discs that were no longer needed has caused a breach of protected health information at Virginia Commonwealth University Health System.

A staff member started donating the CDs in January 2015 and VCUHS did not learn of it until Oct. 15, 2014. The discs were not cleared of PHI such as patient names, addresses, birth dates, clinical information, medical records numbers and insurance information, and a limited number of discs also held Social Security numbers. Since the discovery, protocols covering media destruction have been revised.

A VCUHS spokesperson did not respond to a request for more information on the scope of the breach. In a statement, the organization said notification letters have been mailed to affected patients and identity protection services are being offered.

More for you

Loading data for hdm_tax_topic #reducing-cost...