Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
EISENHOWER MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on March 29, 2012. Also cited in 279 other reports.
Report ID: GMV911.01, California Department of Public Health
Reported Entity: EISENHOWER MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to ensure Patient A's electronic record was maintained separated from Patient B's electronic record. Patient A had a similar name to Patient B.This failure resulted in the unauthorized disclosure of Patient A's protected health information (PHI), which created the potential for unauthorized use.Findings:On March 7, 2012, Patient B reeived copies of records including Patient A's name, date of birth, medical record number, and treatment information.On March 29, 2012, at 1:50 p.m., a telephone interview was conducted with the facility Compliance Specialist. The Compliance Specialist stated Patient A's electronic record was partly merged with Patient B's electronic record. Patient A had a similar name to Patient B. The record included Patient A's name, date of birth, medical record number, and treatment information.On March 29, 2012, the facility policy and procedure titled, "Information Privacy," was reviewed. The policy indicated, "Policy Pursuant to the Health Insurance Portability and Accountability Act,...and California Privacy Laws, Eisenhower Medical Center will take all necessary steps to avoid unauthorized or unlawful acess, use or disclosure of protected health information..."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280