Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
SALINAS VALLEY MEMORIAL HOSPITAL
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on November 13, 2014. Also cited in 14 other reports.
Report ID: PDUQ11.01, California Department of Public Health
Reported Entity: SALINAS VALLEY MEMORIAL HOSPITAL
Issue:
Based on interview and record review, the hospital failed to prevent the unauthorized disclosure of patient health information (PHI) for one of one sampled patient (1), when Patient 1's hospital Face Sheet containing PHI was found by an individual in her yard. This failure resulted in the disclosure of Patient 1's PHI to an unauthorized individual. Findings:The California Department of Public Health received a faxed report on 6/6/14, which indicated, on 5/23/14 the hospital's CEO received a letter which indicated on 5/3/14 Patient 1's hospital Face Sheet was found in a yard located 0.36 miles from the hospital. Patient 1's hospital Face Sheet disclosed his demographics, insurance information, contact information, and reason for his visit to the hospital Emergency Room. During an interview on 11/13/14 at 1:45 p.m., the PO stated the hospital's CEO received a letter in the mail on 5/23/14 from an individual informing the CEO they found a patient's hospital Face Sheet in their yard. Along with the individual's letter, Patient 1's hospital Face Sheet was included. PO stated she was not sure how Patient 1's hospital Face Sheet ended up in the individual's yard. PO stated she checked other possible sources, but could not identify how the hospital Face Sheet was in the individual's yard.A review of a copy of a letter dated 6/6/14 from the hospital to Patient 1 indicated a copy of Patient 1's hospital Face Sheet was found in an individual's yard on 5/23/14. Patient 1's hospital Face Sheet disclosed his name, address, date of birth, medical record number, social security number, age, sex, family members' contact information, insurance information, and reason for visit, along with the hospital's name and address.A review of a copy of a letter dated 5/5/14 from the individual to the hospital's Board of Directors indicated she had found a copy of Patient 1's hospital Face Sheet in her backyard "this weekend" (5/3/14 - 5/4/14).A review of a copy of the hospital's 4/2/14 "Uses and Disclosures of Protected Health Information - General Rule" policy indicated PHI may be provided only for: the provision of patient care, billing of patient care, or research. PHI is limited only to individuals who need the information to carry out patient care duties.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280