Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
NORTHBAY MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on June 12, 2014. Also cited in 9 other reports.
Report ID: H0YK11, California Department of Public Health
Reported Entity: NORTHBAY MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to keep personal health information confidential when Patient 7's personal medical information was incorrectly shared with other team members not involved with this patient and not authorized to have this information. This failure resulted in a breach of confidentiality and possible unauthorized use of the information.Findings:During an interview on 7/21/14, at 8:40 a.m., Administrative Staff A stated that on 5/7/14, personal medical information of Patient 7 was incorrectly shared with other team members not involved in this patient care. She stated that she first became aware of the breach of confidentiality on 5/7/14 and informed the Department on 5/9/14. Administrative Staff A stated that on 5/7/14, the facility clinic received a patient list from the Labor and Delivery unit. She stated that Patient 7, who was a facility employee, was on the patient list. Administrative Staff A stated that Unlicensed Staff C saw Patient 7's name on the list and shared with Licensed Staff B that Patient 7 had delivered a baby. Licensed Staff B shared the information with other team members in a staff meeting. Administrative Staff A further stated that Patient 7 did not give permission for sharing this information and that Unlicensed Staff C and Licensed Staff B should not have shared the information. The facility's letter to Patient 7, dated 5/12/14, revealed that the facility incorrectly shared the patient's personal health information with other team members not involved in this patient care and not authorized to have this information.The facility policy and procedure titled "Confidentiality of Patient Information," dated 4/12, indicated "Except when required in the regular course of business, the discussion, use, transmission, or narration, in any form, of any patient information is strictly forbidden."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280