Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
SANTA CLARA VALLEY MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on March 28, 2014. Also cited in 90 other reports.
Report ID: R21P11, California Department of Public Health
Reported Entity: SANTA CLARA VALLEY MEDICAL CENTER
Issue:
Based on interview and record review, the hospital failed to prevent unauthorized disclosure of patients' medical information when:a) Patient 2 received a medical bill that disclosed Patient 1's name and medical record number, andb) Patient 2 received an identity band that had Patient 1's name and medical record number.Findings:The Department received an entity reported incident from the facility on 10/24/13 which indicated on 10/18/13, Patient 2 received a bill with Patient 1's name and medical record number on it. The report further revealed Patient 1's identity band was placed on Patient 2 during an emergency visit on 8/24/13.During an interview with the facility's Ethics and Compliance Officer (ECO) on 3/28/14 at 10:20 a.m., she stated Patient 2 received a bill that had Patient 1's name and medical record number. Although, the bill had the incorrect patient's name, the services charged were correct for Patient 2. The ECO further stated when Patient 2 was admitted, he was given an identity band which had Patient 1's name and medical record number due to Patient 2 and Patient 1 having identical names with the exception of their middle name.Review of the facility's letter addressed to Patient 1 dated 10/24/13 revealed Patient 1's medical information was accidentally disclosed to Patient 2 when Patient 2 received a bill with Patient 1's name and medical record number. The letter indicated a staff member registered Patient 2 incorrectly. The staff member accessed Patient 1's account during Patient 2's hospital registration. Patient health information disclosed included Patient 1's name and medical record number.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280