Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
COMMUNITY HOSPITAL OF SAN BERNARDINO
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on June 26, 2014. Also cited in 46 other reports.
Report ID: OPJF11.01, California Department of Public Health
Reported Entity: COMMUNITY HOSPITAL OF SAN BERNARDINO
Issue:
Based on interview, and record review, the facility failed to ensure that copies of immunization records placed in an envelope for Employee 2, were verified for accuracy by the Employee Health Nurse. This resulted in Employee 2 receiving copies of Employee 1's immunization records which resulted in a breach of Employee 1's confidential protected health information (PHI).Finding:On July 2, 2014 at 4:35 PM, a phone interview was conducted with the Facility Privacy Officer (FPO) regarding a breach of PHI for Employee 1, which was detected by the facility on March 6, 2013. She stated that the Employee Health Nurse had unknowingly placed copies of immunization records for Employee 1 in an envelope for Employee 2. When Employee 2 received the envelope and opened it, she noted that the name on the top of the documents was not her name and she immediately closed the envelope and notified Employee Health Service (EHS) and reported the breach. The PHI contained in the envelope given to Employee 2 included the name, address, immunization record and vaccination consent for Employee 1. A review of facility Policy and Procedure titled "Safeguarding PHI and Sensitive Information noted: " 1. POLICY:" "It is the policy of (name of facility) to provide appropriate access to its information based on a need-to-know basis while preserving its confidentiality and integrity.""Definitions....Personal Infomration-means an individuals firs name or first initial and last name in combination with any one or more of the following data elementsThe failure of the Employee Health Nurse to match the name on each document she placed in the envelope for Employee 2, resulted in the unauthorized release of Employee 1's PHI.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights