Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
LOMA LINDA UNIVERSITY MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on July 16, 2014. Also cited in 44 other reports.
Report ID: 747T11.01, California Department of Public Health
Reported Entity: LOMA LINDA UNIVERSITY MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to safeguard the confidential medical condition of Patient A, when a pharmacist (Employee 1) send a telephone text message to patient A's husband, who was unaware of Patient A's diagnosis and treatment. This resulted in Patient A's protected health information (PHI) being released without authorization.Findings:On July 17, 2014 at 11:00 AM, a phone interview was conducted with the facility privacy officer (FPO) regarding an entity reported incident of a breach (violation) of PHI for Patient A who was also an employee of the facility. The FPO indicated on April 26, 2010, Patient A had taken a prescription to the pharmacy. The pharmacist (Employee 1) sent a text message to Patient A's husband which included Patient A's name and the assumed condition. Patient A learned of the breach of her PHI from her husband on April 27, 2010, and notified the Human Resource Department and Corporate Compliance Office at the facility.During a review of a secure email received from the FPO on July 16, 2014 at 3:53 PM, the information provided included the name of Patient A, the name of Patient A's husband, and the name of the pharmacist (Employee 1), The message indicated Employee 1 had been terminated on May 25, 2010.A review was conducted of the notification letter sent from the facility to Patient A, dated April 30, 2010. The letter indicated that a thorough investigation would be conducted by the facility based on the concern that Patient A had identified, and Patient A would be notified of the outcome of the investigation.The release of Patient A's protected health information by Employee 1 to Patient A's husband without written authorization was a breach of her confidential medical care.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights