Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
DOCTORS MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on August 15, 2012. Also cited in 64 other reports.
Report ID: G5QD11, California Department of Public Health
Reported Entity: DOCTORS MEDICAL CENTER
Issue:
Based on staff interview, facility and administrative document review the facility failed to keep Protected Health Information (PHI) confidential when:1. Patient 1's PHI was mistakenly given to Patient 2.2. Patient 3's face sheet was mistakenly given to Patient 4.These failures placed Patient 1 and Patient 3's PHI at a potential risk for unauthorized use.Findings: Refer to CA003154391. 8/15/12 at 11:20 a.m. Staff 1 (Privacy Officer) stated on 6/20/12 the facility became aware of a possible privacy breach. The facility's internal investigation revealed on approximately 6/15/12 nursing notes containing Patient 1's PHI was was mistakenly given to Patient 2 and later found by Patient 2's family. Staff 1 stated it was the staff's responsibility to ensure patients' PHI remained confidential under all circumstances.On 8/15/12 at 11:32 a.m., Staff 1 stated the nursing notes contained Patient 1's name, date of birth, date of service, medical record number, medical and social history, diagnosis, immunizations and medication.On 8/15/12 the facility policy and procedure number 1.0.0, titled "Privacy Policy Overview" contained the following documentation: " Privacy Policies and Procedures have been established to outline directives relating to the Protected Health Information ("PHI") of Patients. These directives include: Protecting the privacy of the PHI of Patients in accordance with California and federal requirements. ...Affording Patients their rights with respect to their PHI in accordance with California and federal requirements."Refer to CA003177802. 8/15/12 at 11:20 a.m. Staff 1 stated on 6/21/12 the facility became aware of a possible privacy breach. The facility's internal investigation revealed on 5/31/12 Staff 2 (Registered Nurse) mistakenly gave Patient 3's facesheet to Patient 4 in the emergency department. Staff 1 stated it was Staff 2's responsibility to check the patients' identification band to ensure the right patient received the right documents.On 8/15/12 at 11:32 a.m., Staff 1 stated the facesheet contained Patient 3's name, date of birth, date of service, medical record number, address, diagnosis and social security number.On 8/15/12 the facility policy and procedure number 1.0.0, titled "Privacy Policy Overview" contained the following documentation: " Privacy Policies and Procedures have been established to outline directives relating to the Protected Health Information ("PHI") of Patients. These directives include: Protecting the privacy of the PHI of Patients in accordance with California and federal requirements. ...Affording Patients their rights with respect to their PHI in accordance with California and federal requirements."
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights