Privacy Act of 1974; System of Records

Notice of Amendment to System of Records.

Citation: "79 FR 47727"

Page Number: "47727"

"Notices"

SUMMARY: As required by the Privacy Act of 1974, 5 U.S.C. 552a(e), notice is hereby given that the Department of Veterans Affairs (VA) is amending the system of records currently entitled "Patient Medical Record-VA" (24VA10P2) as set forth in the Federal Register 77 FR 65938. VA is amending the system by revising the Routine Uses of Records Maintained in the System, Storage, and Safeguard. VA is republishing the system notice in its entirety.

   DATES: Comments on this new system of records must be received no later than September 15, 2014. If no public comment is received during the period allowed for comment or unless otherwise published in the Federal Register by VA, the new system will become effective September 15, 2014.

   ADDRESSES: Written comments concerning the proposed amended system of records may be submitted by mail or hand-delivery to Director, Regulations Management (02REG), Department of Veterans Affairs, 810 Vermont Avenue NW., Room 1068, Washington, DC 20420; fax to (202) 273-9026; or email to http://www.regulations.gov. All comments received will be available for public inspection in the Office of Regulation Policy and Management, Room 1063B, between the hours of 8:00 a.m. and 4:30 p.m., Monday through Friday (except holidays). Please call (202) 461-4902 (this is not a toll-free number) for an appointment.

   FOR FURTHER INFORMATION CONTACT: Veterans Health Administration (VHA) Privacy Act Officer, Department of Veterans Affairs, 810 Vermont Avenue NW., Washington, DC 20420; telephone (704) 245-2492.

   SUPPLEMENTARY INFORMATION: Routine use fifty (50) duplicates routine use thirty-three (33). Therefore, routine use 33 will be replaced with a new routine use, which states that VA may disclose relevant health care information to the Department of Defense (DoD) or its components for the counseling and treatment of individuals or families involved in abuse, neglect, or in the provision of spiritual and pastoral care. This routine use is intended to allow VA health care providers to disclose relevant health care information to DoD or its components so that DoD and its components may provide counseling and other social services to its personnel when VA employees learn of abuse or neglect during the course of their work. This routine use is also added to state that VA chaplains may disclose relevant personal health information to DoD chaplains with whom they work in the provision of spiritual and pastoral care. This routine use will allow the normal gamut of social work services and pastoral services to be provided to DoD personnel who receive their care from VA personnel as well as other joint VA-DoD health care facilities.

   The Storage section is being amended to add VHA Records Center and Vault. This section is also being amended to remove the statement that paper records are currently being relocated from Federal record centers to the VA Records Center and Vault. It is projected that all paper records will be stored at the VA Records Center and Vault by the end of the calendar year 2014. The Safeguard section is being amended to change the VA Boston Development Center to the Allocation Resource Center.

   The Report of Intent to Amend a System of Records Notice and an advance copy of the system notice have been sent to the appropriate Congressional committees and to the Director of the Office of Management and Budget (OMB) as required by 5 U.S.C. 552a(r) (Privacy Act) and guidelines issued by OMB (65 FR 77677), December 12, 2000.

Signing Authority

   The Secretary of Veterans Affairs, or designee, approved this document and authorized the undersigned to sign and submit the document to the Office of the Federal Register for publication electronically as an official document of the Department of Veterans Affairs. Jose D. Riojas, Chief of Staff, Department of Veterans Affairs, approved this document on July 30, 2014, for publication.

   Dated: August 11, 2014.

Robert C. McFetridge,

Director, Office of Regulation Policy and Management, Office of the General Counsel, Department of Veterans Affairs.

24VA10P2

SYSTEM NAME:

   Patient Medical Records-VA.

SYSTEM LOCATION:

   Records are maintained at each VA health care facility (in most cases, backup information is stored at off-site locations). Subsidiary record information is maintained at the various respective services within the health care facility (e.g., Pharmacy, Fiscal, Dietetic, Clinical Laboratory, Radiology, Social Work, Psychology) and by individuals, organizations, and/or agencies with which VA has a contract or agreement to perform such services, as VA may deem practicable.

   Address locations for VA facilities are listed in Appendix 1 of the biennial publication of the VA Privacy Act Issuances. In addition, information from these records or copies of these records may be maintained at the Department of Veteran Affairs Central Office, 810 Vermont NW., Washington, DC 20420; VA National Data Centers; VA Health Data Repository (HDR), located at the VA National Data Centers; VA Chief Information Office Field Offices; Veterans Integrated Service Networks (VISN); and Regional and General Counsel Offices.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

   1. Veterans who have applied for health care services under Chapter 17 of Title 38, United States Code, and members of their immediate families;

   2. Spouses, surviving spouses, and children of veterans who have applied for health care services under Chapter 17 of Title 38, United States Code;

   3. Beneficiaries of other Federal agencies;

   4. Individuals examined or treated under contract or resource sharing agreements;

   5. Individuals examined or treated for research or donor purposes;

   6. Individuals who have applied for Title 38 benefits but who do not meet the requirements under Title 38 to receive such benefits;

   7. Individuals who were provided medical care under emergency conditions for humanitarian reasons;

   8. Pensioned members of allied forces provided health care services under Chapter I of Title 38, United States Code; and

   9. Caregivers.

CATEGORIES OF RECORDS IN THE SYSTEM:

   The patient medical record is a consolidated health record (CHR) which may include: (i) An administrative (non-clinical information) record (e.g., medical benefit application and eligibility information) including information obtained from Veterans Benefits Administration automated records such as the Veterans and Beneficiaries Identification and Records Locator Subsystem-VA (38VA23) and the Compensation, Pension, Education and Rehabilitation Records-VA (58VA21/22/28), and correspondence about the individual;

   (ii) A medical record (a cumulative account of sociological, diagnostic, counseling, rehabilitation, drug and alcohol, dietetic, medical, surgical, dental, psychological, and/or psychiatric information compiled by VA professional staff and non-VA health care providers), and

   (iii) Subsidiary record information (e.g., Bed Management Solution (BMS), tumor registry, certain clinically oriented information associated with My HealtheVet such as secure messages, minimum data set, dental, pharmacy, nuclear medicine, clinical laboratory, radiology, and patient scheduling information). The CHR may include identifying information (e.g., name, address, date of birth, VA claim number, social security number); military service information (e.g., dates, branch and character of service, service number, medical information); family information (e.g., next of kin and person to notify in an emergency; address information, name, social security number, and date of birth for a veteran's spouse and dependents; family medical history information); employment information (e.g., occupation, employer name and address); financial information (e.g., family income; assets; expenses; debts; amount and source of income for veteran, spouse, and dependents); third-party health plan contract information (e.g., health insurance carrier name and address, policy number, amounts billed and paid); and information pertaining to the individual's medical, surgical, psychiatric, dental, and/or psychological examination, evaluation, and/or treatment (e.g., information related to the chief complaint and history of present illness; information related to physical, diagnostic, therapeutic special examinations; clinical laboratory, pathology and x-ray findings; operations; medical history; medications prescribed and dispensed; treatment plan and progress; consultations; photographs taken for identification and medical treatment; education and research purposes; facility locations where treatment is provided; observations and clinical impressions of health care providers to include identity of providers and to include, as appropriate, the present state of the patient's health; and an assessment of the patient's emotional, behavioral, and social status, as well as an assessment of the patient's rehabilitation potential and nursing care needs). Abstract information (e.g., environmental, epidemiological and treatment regimen registries) is maintained in auxiliary paper and automated records.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

   Title 38, United States Code, Sections 501(b) and 304.

PURPOSE(S):

   The paper and automated records may be used for such purposes as: Ongoing treatment of the patient; documentation of treatment provided; payment; health care operations such as producing various management and patient follow-up reports; responding to patient and other inquiries; for epidemiological research and other health care related studies; statistical analysis, resource allocation and planning; providing clinical and administrative support to patient medical care; determining entitlement and eligibility for VA benefits; processing and adjudicating benefit claims by Veterans Benefits Administration Regional Office staff; for audits, reviews, and investigations conducted by staff of the health care facility, the networks, VA Central Office, and the VA Office of Inspector General (OIG); sharing of health information between and among VHA, DoD, Indian Health Services, and other government and private industry health care organizations; law enforcement investigations; quality assurance audits, reviews, and investigations; personnel management and evaluation; employee ratings and performance evaluations; and employee disciplinary or other adverse action, including discharge; advising health care professional licensing or monitoring bodies or similar entities of activities of VA and former VA health care personnel; accreditation of a facility by an entity such as the Joint Commission (JCAHO); and notifying medical schools of medical students' performance and billing.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

   To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia, or infection with the human immunodeficiency virus, that information may not be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

   1. VA may disclose health care information as deemed necessary and proper to Federal, State, and local government agencies and national health organizations in order to assist in the development of programs that will be beneficial to claimants, protect their rights under law, and assure that they are receiving all benefits to which they are entitled.

   2. VA may disclose health care information furnished and the period of care, as deemed necessary and proper to accredited service organization representatives and other approved agents, attorneys, and insurance companies to aid claimants whom they represent in the preparation, presentation, and prosecution of claims under laws administered by VA, or State or local agencies.

   3. VA may disclose on its own initiative any information, except the names and addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature, and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto.

   4. VA may disclose information to a Federal agency or the District of Columbia government, in response to its request, in connection with the hiring or retention of an employee and the issuance of a security clearance as required by law, the reporting of an investigation of an employee, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision.

   5. Health care information may be disclosed by appropriate VA personnel to the extent necessary and on a need-to-know basis, consistent with good medical-ethical practices, to family members and/or the person(s) with whom the patient has a meaningful relationship.

   6. In response to an inquiry from a member of the general public about a named individual, VA may disclose the patient's name, presence (and location when needed for visitation purposes) in a medical facility, and general condition that does not reveal specific medical information (e.g., satisfactory, seriously ill).

   7. In the course of presenting evidence to a court, magistrate, or administrative tribunal in matters of guardianship, inquests, and commitments, VA may disclose relevant information to private attorneys representing veterans rated incompetent in conjunction with issuance of certificates of incompetency and to probation and parole officers in connection with court-required duties.

   8. VA may disclose relevant information to a guardian ad litem in relation to his or her representation of a claimant in any legal proceeding.

   9. VA may disclose information to a member of Congress or a congressional staff member in response to an inquiry from the congressional office made at the request of that individual.

   10. VA may disclose name(s) and address(es) of present or former members of the armed services and/or their dependents under certain circumstances: (a) To any nonprofit organization, if the release is directly connected with the conduct of programs and the utilization of benefits under Title 38, or (b) to any criminal or civil law enforcement governmental agency or instrumentality charged under applicable law with the protection of the public health or safety, if a qualified representative of such organization, agency, or instrumentality has made a written request for such name(s) or address(es) for a purpose authorized by law, provided that the records will not be used for any purpose other than that stated in the request and that the organization, agency, or instrumentality is aware of the penalty provision of 38 U.S.C. 5701(f).

   11. VA may disclose the nature of the patient's illness, probable prognosis, estimated life expectancy, and need for the presence of the related service member to the American Red Cross for the purpose of justifying emergency leave.

   12. VA may disclose relevant information to attorneys, insurance companies, employers, third parties liable or potentially liable under health plan contracts, and courts, boards, or commissions, to the extent necessary to aid VA in the preparation, presentation, and prosecution of claims authorized under Federal, State, or local laws, and regulations promulgated thereunder.

   13. VA may disclose health information for research purposes determined to be necessary and proper to epidemiological and other research entities approved by the Under Secretary for Health or designee, such as the Medical Center Director of the facility where the information is maintained.

   14. VA may disclose health information, including the name(s) and address(es) of present or former personnel of the Armed Services and/or their dependents, (a) to a Federal Department or agency or (b) directly to a contractor of a Federal Department or agency, at the written request of the head of the agency or the designee of the head of that agency, to conduct Federal research necessary to accomplish a statutory purpose of an agency. When this information is to be disclosed directly to the contractor, VA may impose applicable conditions on the Department, agency, and/or contractor to ensure the appropriateness of the disclosure to the contractor.

   15. VA may disclose relevant information to the Department of Justice or other Federal agencies in pending or reasonably anticipated litigation or other proceedings before a court, administrative body, or other adjudicative tribunal, when:

   (a) VA or any subdivision thereof;

   (b) Any VA employee in his or her official capacity;

   (c) Any VA employee in his or her individual capacity, where DoJ has agreed to represent the employee; or

   (d) The United States, where VA determines that the proceedings are likely to affect the operations of VA or any of its components is a party to or has an interest in the proceedings, and VA determines that the records are relevant and necessary to the proceedings.

   16. Health care information may be disclosed by the examining VA physician to a non-VA physician when that non-VA physician has referred the individual to VA for medical care.

   17. VA may disclose records to the National Archives and Records Administration and the General Services Administration in records management inspections and other activities conducted under Title 44.

   18. VA may disclose health care information concerning a non-judicially declared incompetent patient to a third party upon the written authorization of the patient's next of kin in order for the patient or, consistent with the best interest of the patient, a member of the patient's family, to receive a benefit to which the patient or family member is entitled or to arrange for the patient's discharge from a VA medical facility. Sufficient information to make an informed determination will be made available to such next of kin. If the patient's next of kin is not reasonably accessible, the chief of staff, director, or designee of the custodial VA medical facility may make the disclosure for these purposes.

   19. VA may disclose information to a Federal agency, a state or local government licensing board, and/or the Federation of State Medical Boards or a similar non-governmental entity that maintains records concerning individuals' employment histories or concerning the issuance, retention, or revocation of licenses, certifications, or registration necessary to practice an occupation, profession, or specialty, to inform the entity about the health care practices of a terminated, resigned, or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

   20. VA may disclose information maintained in connection with the performance of any program or activity relating to infection with the Human Immunodeficiency Virus (HIV) to a Federal, State, or local public health authority that is charged under Federal or State law with the protection of the public health, and to which Federal or State law requires disclosure of such record, if a qualified representative of such authority has made a written request that such record be provided as required pursuant to such law for a purpose authorized by the law. The person to whom information is disclosed, under 38 U.S.C. 7332(b)(2)(C), should be advised that they shall not re-disclose or use such information for a purpose other than that for which the disclosure was made. The disclosure of patient name and address under this routine use must comply with the provisions of 38 U.S.C. 5701(f)(2).

   21. Information indicating that a patient or subject is infected with the Human Immunodeficiency Virus (HIV) may be disclosed by a physician or professional counselor to the spouse of the patient or subject, to an individual with whom the patient or subject has a meaningful relationship, or to an individual whom the patient or subject has during the process of professional counseling or of testing to determine whether the patient or subject is infected with the virus, identified as being a sexual partner of the patient or subject. Disclosures may be made only if the physician or counselor, after making reasonable efforts to counsel and encourage the patient or subject to provide the information to the spouse or sexual partner, reasonably believes that the patient or subject will not provide the information to the spouse or sexual partner and that the disclosure is necessary to protect the health of the spouse or sexual partner. Such disclosures should, to the extent feasible, be made by the patient's or subject's treating physician or professional counselor. Before any patient or subject gives consent to being tested for the HIV, as part of pre-testing counseling, the patient or subject must be informed fully about these notification procedures.

   22. VA may disclose information, including name, address, social security number, and other information as is reasonably necessary to identify an individual, to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/re-privileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention, or termination of the applicant or employee.

   23. VA may disclose relevant information to the National Practitioner Data Bank and/or State Licensing Board in the state(s) in which a practitioner is licensed, the VA facility is located, and/or an act or omission occurred upon which a medical malpractice claim was based, when VA reports information concerning: (a) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice, if an appropriate determination is made in accordance with Department policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (b) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or (c) the surrender of clinical privileges or any restriction of such privileges by a physician or dentist, either while under investigation by the health care entity relating to possible incompetence or improper professional conduct. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

   24. VA may disclose relevant health care information to a state veterans home for the purpose of medical treatment and/or follow-up at the state home when VA makes payment of a per diem rate to the state home for the patient receiving care at such home, and the patient receives VA medical care.

   25. VA may disclose relevant health care information to (a) a Federal agency or non-VA health care provider or institution when VA refers a patient for hospital or nursing home care or medical services, or authorizes a patient to obtain non-VA medical services, and the information is needed by the Federal agency or non-VA institution or provider to perform the services, or (b) a Federal agency or a non-VA hospital (Federal, State and local, public or private) or other medical installation having hospital facilities, blood banks, or similar institutions, medical schools or clinics, or other groups or individuals that have contracted or agreed to provide medical services or share the use of medical resources under the provisions of 38 U.S.C. 513, 7409, 8111, or 8153, when treatment is rendered by VA under the terms of such contract or agreement, or the issuance of an authorization, and the information is needed for purposes of medical treatment and/or follow-up, determining entitlement to a benefit, or recovery of the costs of the medical care.

   26. VA may disclose health care information for program review purposes and the seeking of accreditation and/or certification to survey teams of the JCAHO, College of American Pathologists, American Association of Blood Banks, and similar national accrediting agencies or boards with which VA has a contract or agreement to conduct such reviews, but only to the extent that the information is necessary and relevant to the review.

   27. VA may disclose relevant health care information to a non-VA nursing home facility that is considering the patient for admission, when information concerning the individual's medical care is needed for the purpose of preadmission screening under 42 CFR 483.20(f), to identify patients who are mentally ill or mentally retarded so they can be evaluated for appropriate placement.

   28. VA may disclose information which relates to the performance of a health care student or provider to a medical or nursing school or other health care related training institution, or other facility with which VA has an affiliation, sharing agreement, contract, or similar arrangement, when the student or provider is enrolled at or employed by the school, training institution, or other facility, and the information is needed for personnel management, rating, and/or evaluation purposes.

   29. VA may disclose relevant health care information to individuals, organizations, and private or public agencies with which VA has a contract or sharing agreement for the provision of health care or administrative services.

   30. VA may disclose identifying information, including social security number of a veteran, spouse, and dependent, to other Federal agencies for purposes of conducting computer matches to obtain information to determine, or to verify eligibility of veterans who are receiving VA medical care under Title 38.

   31. VA may disclose the name and social security number of a veteran, spouse, and dependent, and other identifying information as is reasonably necessary, to the Social Security Administration, Department of Health and Human Services (HHS), for the purpose of conducting a computer match to obtain information to validate the social security numbers maintained in VA records.

   32. VA may disclose the patient's name and relevant health care information concerning an adverse drug reaction to the Food and Drug Administration (FDA), HHS, for purposes of quality of care management, including detection, treatment, monitoring, reporting, analysis, and follow-up actions relating to adverse drug reactions.

   33. VA may disclose relevant health care information to DoD or its components for the counseling and treatment of individuals or families involved in abuse, neglect or in the provision of spiritual and pastoral care.

   34. VA may disclose information pursuant to 38 U.S.C. 7464, and notwithstanding SUBSEC 5701 and 7332, to a former VA employee, as well as an authorized representative of the employee, whose case is under consideration by the VA Disciplinary Appeals Board, in connection with the considerations of the Board, to the extent the Board considers appropriate for purposes of the proceedings of the Board in that case, when authorized by the chairperson of the Board.

   35. Information that a patient is infected with Hepatitis C may be disclosed by a physician or professional counselor to the spouse, the person or subject with whom the patient has a meaningful relationship, or an individual whom the patient or subject has identified as being a sexual partner of the patient or subject.

   36. VA may disclose to the Federal Labor Relations Authority, including its General Counsel, information related to the establishment of jurisdiction, investigation, and resolution of allegations of unfair labor practices, or in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised in matters before the Federal Service Impasses Panel.

   37. VA may disclose information to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.