An employee from the Field Office was contacted by a VA employee . Her personnel health folder was sent to him but not requested . He contacted said employee and mailed her folder to her . She brought it to the attention of the Information Security Officer ( ISO ) and Privacy Officer ( PO ) . It contained a couple of pages of another employee 's information in her folder as well as her information . The Albany facility mailed a paper employee health record to a VA facility in Ohio in error . A member of the Ohio facility HR staff telephoned the employee whose