This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.

Scripps Mercy Hospital

4077 5TH AVE SAN DIEGO,CA 92103

Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on June 6, 2013. Also cited in 72 other reports.


Report ID: 4TCE11, California Department of Public Health

Reported Entity: SCRIPPS MERCY HOSPITAL

Issue:

Based on interview and record review, the hospital failed to safeguard protected health information, (PHI - any information about health status, provision of health care, or payment of health care, that can be linked to a specific individual from an unauthorized person) in accordance with their policy and procedure, for 1 sampled patient (1). Patient 1's PHI was inadvertently given to the wrong patient upon discharge. Findings:On 6/6/13 at 3:50 P.M.. the Clinical Risk Specialist (CRS) was interviewed. She stated that hospital staff inadvertently gave Patient 1's PHI to the wrong person. According to the CRS, an additional number of pages belonging to Patient 1, were given to an other person who was discharged on the same day. She stated that the staff should have verified that all of the pages of the document were for the correct patient.On 6/6/13 at 4:05 P.M., the hospital's policy and procedure titled, "Confidentiality of Information", dated 11/15/13, was reviewed. It included that the hospital, "is committed to safeguarding our patient's privacy and the confidentiality of records and related information for all patients, employees, donors, and for organizational and operating information. It is the responsibility of every (hospital) employee, medical staff member, contractor, volunteer, or third party having access to (hospital) information to follow all of (hospital) policies and to safeguard all Confidential Information." It also included the "Stop" instructions to verify that the "Right Discharge Instructions:" included, "check the name on the paperwork," and "check all of the pages."On 9/9/15 at 1:30 P.M., the CRS acknowledged that this policy was not implemented when Patient 1's PHI was not safeguarded and was inadvertently given to the incorrect person.

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights

Do you believe your privacy has been violated? Here’s what you can do: