Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
DOCTORS MEDICAL CENTER
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on February 10, 2012. Also cited in 64 other reports.
Report ID: 90TJ11.01, California Department of Public Health
Reported Entity: DOCTORS MEDICAL CENTER
Issue:
Facility detected the Breach of Patient Health Information on 3/6/09.Facility reported the Breach of Patient Health Information to the Department on 3/12/09.Facility notified Patient A of the Breach of Patient Health Information on 3/11/09.Based on staff interview and review of facility documents, the facility failed to prevent the disclosure of Patient A's health information (PHI) while in the emergency department (ED), when another ED patient received Patient A's discharge instructions and prescriptions. Additionally, the facility failed to report an incident of unauthorized disclosure of a patient's medical information to the Department within 5 calendar days.Findings:1. On 2/10/12 at 2:00 p.m., the facility's investigation of the incident was reviewed with the Compliance Officer (CO). A review of the investigation showed that on 3/6/09, an ED nurse gave Patient A's discharge instructions to another ED patient. The ED nurse realized through a paper trail, that she had given Patient A's documentation to the wrong patient. The ED shift manager contacted the patient at home via telephone and asked to return the documents to the ED. The documents were returned to the ED and shredded. A copy of Patient A's discharge instructions showed that she had been treated for low blood pressure and renal insufficiency. Further review showed that Patient A's prescriptions were for Vicodin (narcotic pain reliever) and Robin (muscle relaxer). Patient A was notified of her PHI disclosure on 3/11/09 by a certified letter. 2. On 2/10/12 at 1:00 p.m., the facility's investigation of the above incident was reviewed with the Compliance Officer (CO). The CO confirmed that the facility became aware of the incident on 3/6/09 and the Department received a notification by fax on 3/12/09 (1 day after the incident should have been reported).On 2/10/12 at 2:05 p.m., the facility's Compliance Officer (CO) was asked if they were aware of the 5-day reporting component and she stated, "Yes, but during that time all of the incidents were sent to their corporate headquarters for review prior to reporting." The CO stated that they no longer do this.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280