Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
DOCTORS MEDICAL CENTER
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on February 10, 2012. Also cited in 64 other reports.
Report ID: F00W11.01, California Department of Public Health
Reported Entity: DOCTORS MEDICAL CENTER
Issue:
Based on staff interview and review of facility documents, the facility failed to prevent the unauthorized disclosure of Patient A's health information (PHI) when an unknown facility employee faxed Patient A's face sheet to a local resident's fax machine. Findings:On 2/10/12 at 1:45 p.m., the facility's investigation of the incident was reviewed with the Compliance Officer (CO). A review of the investigation showed that on 5/20/09, a copy of Patient A's face sheet was faxed to a local resident's fax machine. The facility became aware of the error on 5/21/09, when the recipient of the fax called the facility to report that he had received Patient A's information. The fax was sent from the post-anesthesia care unit (PACU) and per the CO it is used by many staff members and physicians.On 2/10/12 at 1:55 p.m., on interview, the CO stated that the Surgery Director (SD) was unable to ascertain who faxed the face sheet and why. The CO stated that she was not notified about the incident until 5/28/09. A copy of the letter sent to Patient A notifying her of the incident was dated 6/2/09. The CO stated that because of the sensitive personal information contained on the face sheet, (such as demographics, insurance information, social security number, etc.) the facility also sent her forms for identity protection. The CO stated that they offered to maintain this service for Patient A for 1 year at no cost to the patient. The CO stated that the facility was not sure who sent the fax, but the SD re-educated all PACU staff about the importance of patient confidentiality and unauthorized disclosure of any patient's health information (PHI).
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280