Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
RIVERSIDE COUNTY REGIONAL MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on November 14, 2013. Also cited in 123 other reports.
Report ID: SQ7011.01, California Department of Public Health
Reported Entity: RIVERSIDE COUNTY REGIONAL MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to prevent the unauthorized access and or disclosure of Patient A's medical/private information. This failure had the potential to result in the misuse of Patient A's medical/private information.Findings:During an interview with the Compliance Officer (CO), on November 14, 2013, at 1:30 p.m., she stated on October 31, 2013, the facility was informed that Patient A's return to work document was inadvertently given to Patient B by a staff nurse.The CO stated it was the facility's policy and procedure to use two patient identifiers when providing care, treatment, or services for patients.The CO stated the staff nurse providing care for Patient A and B did not follow the hospital policy and procedure.The document intended for Patient A and was given to Patient B, contained the following information:Patient A's name,Date of Birth,Medical Record number, andA statement indicating Patient A "Underwent surgery."The facility policy and procedure titled "Patient Identification" dated May 23, 2012, indicated "2. Policy. The policy of ....(Name of facility) is to 2.1 use at least two patient identifiers when providing care, treatment, or services..."The facility policy and procedure titled "Breach of Patient Privacy: Reporting Requirements," dated September 23, 2009, revealed "... Breach: The unauthorized acquisition, access, use, or disclosure of patient protected health information (PHI) that compromises the security or privacy of the PHI...Medical information: any individually identifiable information, in electronic or physical form, in possession of or derived from a provider of health care, health care service..."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280