Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Mercy Medical Center
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on July 12, 2013. Also cited in 34 other reports.
Report ID: 6LH311.01, California Department of Public Health
Reported Entity: MERCY MEDICAL CENTER
Issue:
Based on staff interview, clinical record and administrative document review, the facility failed to keep Protected Health Information (PHI) confidential when a digital camera belonging to the Cardiac Care Unit had pictures of Patient 2 and was picked up and taken home by a family member of Patient 1.This failure resuled in a breeach of Patient 2's right to confidential treatment of PHI and possible unauthorized use.Findings:On 7/12/2013 at 11:55 a.m., during an interview, the Privacy Officer (PO) stated the Cardiac Care unit had taken pictures of Patient 2's wound with a digital camera. The camera was left on the bedside table. Meantime, Patient 1's family member had taken the camera home, but later brought it back.Patient 2's identification sticker on the picture contained PHI breached information which included personal information: patiient name, location, date of birth, medical record number, service account number for billing, and physician name.The facilities policy was dated 12/9/13, titled "Information Management-cellular Telephones" indicated (the hospital) to comply with State and Federal regulations for health information privacy protection regarding electronic devices for communication."
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights