Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
SANTA CLARA VALLEY MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on May 12, 2014. Also cited in 90 other reports.
Report ID: G9H911.01, California Department of Public Health
Reported Entity: SANTA CLARA VALLEY MEDICAL CENTER
Issue:
Based on interview and record review, the hospital failed to prevent unauthorized disclosure of patient health information (PHI) when a box containing 10 patient records was found inside a hospital van during servicing. The van was used for transporting patient records to and from the hospital and its affiliated clinics.Findings:The California Department of Public Health (CDPH) received a faxed report on 3/28/13, which indicated an employee of the County Fleet Department found paperwork containing PHI inside a hospital van during servicing.During an interview on 5/12/14 at 2:45 p.m., in the presence of the compliance officer, the quality improvement manager, and the ethics and compliance officer, the following was stated. A hospital van used for transporting patient health records was taken to the County Fleet for servicing on 3/25/13. During servicing, a Fleet employee found a box containing PHI for 10 patients. The privacy officer further stated, the hospital was not able to identify the driver who took the van for servicing. A review on 5/12/14, of copies of the PHI found in the van indicated patient names, dates of birth, medical record numbers, clinical information, family histories, social histories, and physicians' names were disclosed.A review on 5/12/14, of copies of letters sent to the affected patients indicated a Fleet employee, upon searching a County van brought in for servicing, found medical record documents. These documents contained the patients' name, dates of birth, medical record numbers, patients' account numbers, and progress notes.On 5/15/14 at 9:38 a.m., review of an email sent to CDPH from the quality improvement manager indicated the Fleet employee who found the box containing the PHI could not be interviewed because he no longer worked at the Fleet department, and the hospital did not have his contact information. During a telephone interview on 6/18/14 at 10 a.m., the Fleet supervisor stated she could not remember if she looked inside at any of the documents containing PHI, and did not know if the Fleet employee who handed her the documents looked at them.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280