Who is Revealing Your Private Medical Information?
For the first time, you can easily search whether your hospital, clinic, pharmacy or health insurer has been named in patient privacy complaints, breaches or violations. This tool includes data from the U.S. Department of Health and Human Services Office for Civil Rights (which enforces HIPAA), the California Department of Public Health (which enforces California’s medical privacy laws) and the U.S. Department of Veterans Affairs (which tracks privacy violations at its vast network of veterans hospitals and clinics). Related Story: Few Consequences For Health Privacy Law’s Repeat Offenders
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Search Privacy Violations, Breaches and Complaints
Where HIPAA Violations Happen
Health providers with the most privacy complaints that resulted in corrective-action plans or “technical assistance” provided by the U.S. Department of Health and Human Services Office for Civil Rights from 2011 to 2014:
Culled from California Department of Public Health deficiencies and U.S. Department of Veterans Affairs privacy reports:
…care staff mistakenly gave another patient (Patient 2) Patient 1's colonoscopy photograph.
A male VA employee accessed the records of a female patient he "was allegedly dating or wanted to date."
A nurse "inadvertently notified" a minor patient's dad that she was pregnant before she had a chance to tell him.
A physician's assistant took pictures of a trauma patient with a knife stuck in his head and posted it online.
One of the employees whose medical records was accessed has been arrested for murder of the other employee whose medical record was accessed by the five other individuals.
Top 10 by Agency
California hospitals with the most deficiencies cited:
Organizations with the most complaints and large breach reports:
|U.S. Department of Veterans Affairs
VA facilities with the most privacy incidents: