Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
LOMA LINDA UNIVERSITY MEDICAL CENTER
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on July 30, 2012. Also cited in 44 other reports.
Report ID: KY3N11.01, California Department of Public Health
Reported Entity: LOMA LINDA UNIVERSITY MEDICAL CENTER
Issue:
Based on observation and interview the facility failed to safeguard and secure patients' confidential information and failed to ensure that access of patients' information was limited only to authorized individuals when:(1) the facility left patients' confidential medical records unsecured and unattended and (2) the facility failed to secure discharged medical records at Hospital # 3. These deficient practices allowed for possible unauthorized access and/ or unauthorized removal of clients' confidential information without the facility's knowledge resulting in unauthorized use or identity theft.Findings:1. On 8/1/12 at 11:15 AM, during the environment tour with the Department Manager of Pediatric Hematology, it was observed that there was a three (3) tiered roller cart full of patients' medical records left unattended in the middle of the busy unit. The family members and patients freely moved around the unit. A concurrent interview with the Manager was conducted concerning the patients' clinical records (medical records) that were exposed and readily accessible to unauthorized individuals such as visitors, family members, vendors and repair men entering the facility. The Manager stated that the records were, "usually kept locked in the medicine room. They will be brought back to the medicine room where they used to be." She further stated that for security reasons, housekeeping personnel's access to the medicine room to clean this area, could only be done with an authorized staff person present during clinic hours.
Outcome:
Deficiency cited by the California Department of Public Health: CONFIDENTIALITY OF MEDICAL RECORDS