Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
EISENHOWER MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on December 5, 2013. Also cited in 279 other reports.
Report ID: FXKN11.01, California Department of Public Health
Reported Entity: EISENHOWER MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to prevent the unauthorized access and/or disclosure of Patient A's medical/private information.This failure had the potential to result in the misuse of Patient A's medical/private information.Findings:On December 5, 2013, at 9:10 a.m., a phone interview was conducted with the CS (Compliance Specialist) for the purpose of the investigation of an entity reported incident. The CS stated on October 22, 2013, facility laboratory staff informed the CS patient A's medication list was attached to a laboratory slip and given to Patient B.The CS stated it was the facility's policy for staff to use two patient identifiers (asking for a name, date of birth, ect.) before delivering services for a patient. The CS stated staff did not follow the facility's policy and procedure.The information on Patient A's medication list that was given to Patient B was Patient A's name, date of birth, medical record number, and the names of the medications Patient A was taking.The facility policy and procedure titled "HIPPA- Use and Disclosure of Protected Health Information undated, indicated "It is the policy of ...(facility's name) that the confidentiality of Protected Health information in records and collected...will be protected to the fullest extent possible."The facility indicated, "To protect the patient's right to privacy and confidentiality, at no time will names or information be shared with any person who does not have the need to know in order to provide patient care."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280