Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
STANFORD HOSPITAL
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on February 6, 2012. Also cited in 15 other reports.
Report ID: K41I11, California Department of Public Health
Reported Entity: STANFORD HEALTH CARE
Issue:
Based on interview and record review, the hospital failed to protect the right for confidential medical treatment for two of two sampled patients. Findings;Patient 1 was admitted to the hospital on 11/3/11 for congestive heart failure.Patient 2 was admitted to the hospital on 10/13/11 for a chemical exposure.During an entity reported incident investigation on 2/6/12 at 1 p.m., the privacy officer stated an internal investigation was conducted by the hospital after receiving a notification on 11/8/11 from Patient 1's family member. Patient 1's family member stated she received a call from a lady offering home health services for Patient 1. Patient 1's family member thought the call was unusual and reported it to the hospital. The individual offering home health services was identified as certified nursing assistant (CNA) 1. CNA 1 was a contracted employee of the hospital. An audit was completed and it was confirmed CNA 1 accessed Patient 1's medical record without a medical necessity to do so. The audit also identified CNA 1 accessed Patient 2's medical record without a medical necessity to do so. Both patients and the California Department of Public Health were notified of the privacy breach on 11/15/11.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights