STANFORD HOSPITAL

Report ID: 4IQX11, California Department of Public Health

Reported Entity: STANFORD HOSPITAL

Issue:

Based on interview and record review the hospital failed to protect the right for confidential medical treatment for two of two sampled patients (1, 2). Findings:On 12/7/12, the California Department of Public Health received a faxed report from the hospital chief privacy officer which indicated the hospital identified a potential breach of patients' health information.On 8/12/13 during an interview with the privacy officer, she stated both Patient 1 and Patient 2 had received outpatient oncology (cancer) treatment at the hospital.During a telephone interview on 8/22/13 at 3:30 p.m. with Physician A (MD A), he stated he was writing a chapter for a textbook in November 2011. When submitting his work to the publisher he inadvertently submitted X-ray images of two of his patients (Patient 1 and Patient 2) without removing their names from the images. MD A further stated he was made aware of the above patient disclosure approximately one year later (November 2012) before the text book was published. MD A stated medical information for Patient 1 and Patient 2 was disclosed to the publishing company and their editing associates. On 8/22/13 at 4 p.m. review of the material sent to the publisher indicated the disclosed medical information for Patient 1 and Patient 2 included the patients' names, ages, and medical diagnoses.

Outcome:

Fine imposed and deficiency cited by the California Department of Public Health: Health & Safety Code 1280