Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
SUTTER SANTA ROSA REGIONAL HOSPITAL
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on February 16, 2012. Also cited in 15 other reports.
Report ID: J02W11, California Department of Public Health
Reported Entity: SUTTER SANTA ROSA REGIONAL HOSPITAL
Issue:
Based on interview and record review, the facility failed to prevent unauthorized access to Patient 1's medical information when the patient's x-ray report was inadvertently faxed to the wrong number.Findings:The Department was notified on 1/13/11 at 1:45 p.m., of unauthorized disclosure of Patient 1's personal health information, which occurred on 1/7/11 when the patient's x-ray report was inadvertently faxed to a private business instead of a physician's office. During interview on 2/16/12 at 4:15 p.m., Administrative Staff A stated staff in the radiology department of the hospital had obtained an incorrect fax number for a physician's office, and Patient 1's x-ray report with personal health information was sent to a private business on 1/7/11. Administrative Staff A stated the business notified the facility on 1/10/11 of the misdirected fax and destroyed the fax.During record review on 2/16/12, notifications of the privacy breach within five business days to the Department and to the affected patient were verified. The facility's policy and procedure, titled "Facsimilie (Fax) Transmission of Medical Records, dated 7/09, indicated the following procedure: "6. Care should be taken to assure the fax transmission is sent to the appropriate destination. Destination numbers should be pre-programmed into the fax machine, if possible, to eliminate errors in transmission from misdialing. The fax number on the screen of the fax machine should be checked to be sure it is correct prior to pressing the 'send' button."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280