The donation to children’s art projects of compact discs that were no longer needed has caused a breach of protected health information at Virginia Commonwealth University Health System.

A staff member started donating the CDs in January 2015 and VCUHS did not learn of it until Oct. 15, 2014. The discs were not cleared of PHI such as patient names, addresses, birth dates, clinical information, medical records numbers and insurance information, and a limited number of discs also held Social Security numbers. Since the discovery, protocols covering media destruction have been revised.

A VCUHS spokesperson did not respond to a request for more information on the scope of the breach. In a statement, the organization said notification letters have been mailed to affected patients and identity protection services are being offered.

Register or login for access to this item and much more

All Health Data Management content is archived after seven days.

Community members receive:
  • All recent and archived articles
  • Conference offers and updates
  • A full menu of enewsletter options
  • Web seminars, white papers, ebooks

Don't have an account? Register for Free Unlimited Access