This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.

QUEEN OF THE VALLEY MEDICAL CENTER

1000 TRANCAS ST NAPA,CA 94558

Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on November 29, 2011. Also cited in 17 other reports.


Report ID: WKVT11, California Department of Public Health

Reported Entity: QUEEN OF THE VALLEY MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to prevent unauthorized access and disclosure of confidential medical information when the facility's contracted billing agency sent Patient 1's pathology report results to Patient 1's employer. This failure was a violation of the patient's right to privacy and was upsetting to Patient 1 that his employer now knew Patient 1's medical history.Findings:A complaint was reported on 11/22/11 at 10:24 a.m., that the facility and their contracted billing agency had sent Patient 1's medical records to Patient 1's employer.Patient 1 stated this medical procedure performed in June 2008 was not related to an industrial injury.An email dated 2/10/12 at 1:59 p.m., sent from facility's Director of Financial Services B, indicated that Patient 1s account and billing information was sent to Contracted Billing Agency C for an industrial injury. The bill was denied on 4/29/09 and 4/20/10. The Contract Billing Agency C contacted Patient 1's employer on 11/8/10 and on 4/7/11, Patient 1's employer stated to the Contracted Billing Agency C that they could not find any record of an industrial injury and asked that the Contract Billing Agency C send them the bill. Contracted Billing Agency C requested the medical records on 6/21/11 from the facility. Contracted Billing Agency C received Patient 1's medical records on 10/6/11 from the facility. Patient 1's stated that on 11/10/11, that his employer received Patient 1's medical records that had been sent from the facility to the Contracted Billing Agency C. The Patient 1's name, diagnosis, the procedure performed.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Do you believe your privacy has been violated? Here’s what you can do: