Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Adventist Medical Center
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on December 18, 2013. Also cited in 29 other reports.
Report ID: 8F0211.01, California Department of Public Health
Reported Entity: ADVENTIST MEDICAL CENTER
Issue:
Based on staff interview, clinical, and administrative record review, the hospital failed to keep Protected Health Information (PHI) confidential when medical records for Patient's 1, 2, 3, 4, 5, 6 and 7 were faxed to an incorrect recipient due to using a number auto programmed into the facility's fax system. These failures placed Patient's 1, 2, 3, 4, 5, 6, and 7 PHI at risk for potential unauthorized use. Findings:On 12/26/13 at 9:42 a.m., during an interview, the Privacy Officer (PO) confirmed between 6/14/13 through 6/17/13, seven faxes were sent to a number preprogrammed into the facility's Auto Fax Information System to a provider who no longer worked at the recipient facility. The PO stated the Auto Fax System had not been updated with the providers new fax number. The PO was made aware of the misdirected faxes on 6/24/12 by staff at the recipient facility. The PO stated the misdirected faxes included the following PHI:For Patient 1: Name, date of birth (DOB), date of service (DOS), medical record (MR) number, account number, Diagnosis and/or clinical findings, ordering Medical Doctor (MD) and mammography report. For Patient 2: Name, DOB, DOS, MR number, account number, Diagnosis and/or clinical findings, ordering MD and mammography report. For Patient 3: Name, DOB, DOS, MR number, account number, Diagnosis and/or clinical findings, ordering MD and mammography report. For Patient 4: Name, DOB, DOS, MR number, account number, Diagnosis and/or clinical findings, ordering MD and mammography report. For Patient 5: Name, DOB, DOS, MR number, account number, Diagnosis and/or clinical findings, ordering MD and mammography report. For Patient 6: Name, DOB, DOS, MR number, account number, Diagnosis and/or clinical findings, ordering MD and mammography report. For Patient 7: Name, DOB, DOS, MR number, account number, a medical procedure report with clinical results. The (Hospital) policy and procedure, titled "Faxing Patient Protected Health Information" dated 9/29/09, states; "It is the policy of the organization to authorize faxing of confidential documents... It is the sender's responsibility to be aware of the content of the faxes they are sending, to exercise caution in faxing confidential information, and to take precautionary steps to: validate the fax number, key in correct fax number, confirm fax sent to correct fax number, as well as, request is appropriate and meets minimum necessary."
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights