Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
ADVENTIST MEDICAL CENTER - REEDLEY
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on June 18, 2012. Also cited in 18 other reports.
Report ID: PMCV11, California Department of Public Health
Reported Entity: ADVENTIST MEDICAL CENTER - REEDLEY
Issue:
Based on staff interview, facility and administrative document review, the hospital failed to keep Protected Health Information (PHI) confidential when a prescription containing Patient 1's PHI was mistakenly given to Patient 2. This failure placed Patient 1's PHI at a potential risk for unauthorized use.Findings:On 6/18/12 at 11:28 a.m., during an interview, Staff 1 (Privacy Officer) stated on 5/17/12, during the discharge process, Staff 2 (License Vocational Nurse) mistakenly gave Patient 2 a prescription that contained Patient 1's PHI. Staff 1 stated Staff 2 failed to check the patient's identification band to ensure the right patient was receiving the right documents and to ensure the documents contained the the correct patient's PHI.On 6/18/12 at 11:32 a.m., during an interview, Staff 1 stated the prescription contained Patient 1's name, date of birth, name of medication and dose of medication. The facility policy and procedure number 1000.08.09 titled Confidentiality of Protected Health Information contained the following documentation: "Adventist Health is committed to protecting the privacy and security of protected health information (PHI)...It is the policy to maintain confidentiality for patients and employees at all times and under all circumstances. This commitment must be supported by working to see: That access to the medical record is restricted based on the minimum amount of protected health information (PHI) necessary to accomplish the intended purpose of any use, disclosure or request; That access to the medical record can be managed through concurrent controls and retrospective auditing in order to safeguard the information that it contains; That PHI in all other forms, including oral, is maintained in confidence. "
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights