Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
EISENHOWER MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on January 6, 2015. Also cited in 279 other reports.
Report ID: JMM911, California Department of Public Health
Reported Entity: EISENHOWER MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to prevent unauthorized disclosure of protected health information (PHI) for one patient (Patient 1). An employee gave Patient 1's Discharge Medication List to another patient. This failure resulted in an unauthorized person having access to Patient 1's PHI and the potential misuse of the information.Findings:On January 6, 2015, at 3:45 p.m., the Information Privacy Officer (IPO), was interviewed. The IPO stated Patient 2 was being discharged from an outpatient area of the hospital on December 12, 2014, when he was given a page of Patient 1's Medication List mixed in with his own. The IPO stated the Registered Nurse (RN 1) printed the discharge instructions for Patient 2, and then retrieved those instructions from the printer. The IPO stated RN 1 failed to double check each page of the discharge instructions to ensure they all belonged to the same patient before giving them to Patient 2. The IPO stated Patient 2 notified the facility Patient Relations Coordinator that she received Patient 2's Discharge Medication List.The IPO stated RN 1 failed to double check each page of the discharge paperwork to ensure all the paperwork belonged to Patient 2 prior to giving them to her.The PHI contained on Patient 1's Discharge Medication List included:- Name;- Date of birth;- Medical record number; - Account number; and- List of current medications.The facility policy and procedure titled, "Information Privacy" reviewed/revised January 2, 2014, revealed, "... (facility name) will take all necessary steps to avoid unauthorized or unlawful access, use or disclosure of protected health information ...
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280