In 2021, the names and vaccination statuses of approximately 500,000 employees were disclosed without permission when a spreadsheet containing the information was sent to various members of Veterans Health Administration senior leadership.
“Upon internal review, the VA agrees that the information contained in these documents should not have been placed on SharePoint without appropriate access permissions and this incident resulted in the inadvertent or unauthorized transmissions or disclosure of sensitive personal information,” said Jessica Bonjorni, chief of human capital management for the VA.
Under HIPAA, regulated entities are prohibited from disclosing an individual’s protected health information, which includes COVID-19 vaccination status.
The VA removed the spreadsheet containing employees’ medical information following the internal investigation by the VA’s Data Breach Response Service.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
