Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
COMMUNITY HOSPITAL OF THE MONTEREY PENINSULA
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on May 9, 2014. Also cited in 24 other reports.
Report ID: 12HY11, California Department of Public Health
Reported Entity: COMMUNITY HOSPITAL OF THE MONTEREY PENINSULA
Issue:
Based on interview and record review, the hospital failed to protect the right for confidential treatment of records for 2 of 2 sampled patients (1 and 2), when a summons was sent to the wrong person by the hospital's contracted collections agency. Findings:On 11/19/13 the California Department of Public Health received an online report from the hospital privacy officer which indicated the hospital identified disclosure of personal information for Patients 1 and 2.During an interview on 5/9/14 at 8:30 a.m., the hospital privacy officer stated, on 11/15/13 she was informed by the hospital's contracted collections agency a "Notice of Being Served" (summons) intended for Patients 1 and 2 was served to another individual. The individual who received the summons had the same first and last name as Patient 1, with the exception of a middle initial.The privacy officer stated credit information for Patients 1 and 2 was commingled with that of the third party's which contributed to the collection agency believing they were the same person. The privacy officer stated the discloser occurred on 10/24/13 and the information disclosed included Patients 1 and 2 name, address, the dollar amount of the civil case against them and name of the hospital involved. Record review on 5/12/14 of a copy of the summons indicated the following information was disclosed: Patients 1 and Patient 2 name, address, the dollar amount of the civil case against them and the name of the hospital involved.Record review on 5/12/14 of the contract agreement between the hospital and the collection agency dated 8/13/2007 indicated: "Confidential Information: Customer asserts, and the Agency acknowledges, the patient- identifiable, financial, clinical, and management information and other Customer- specific data that is not in the public domain, and that is disclosed to Agency by Customer so the Agency may provide services pursuant to this agreement, is highly confidential and that in some cases such confidentiality is mandated by law."
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights