Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
KINDRED HOSPITAL - ONTARIO
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on September 13, 2011. Also cited in 5 other reports.
Report ID: IHL411, California Department of Public Health
Reported Entity: KINDRED HOSPITAL ONTARIO
Issue:
Based on interview and record review, the facility failed to protect Patient A's medical information. This breach caused Patient A's protected health care information to be released.Findings:The facility self reported that a one page requesting a copy of a current patient's echocardiogram (Echo) result was inadvertently faxed to a private individual. The fax was intended to be sent to an acute care hospital's medical record office. Review of the letter sent to the patient dated 9/6/11, indicated that the information faxed in error included: patient's name, account number, medical record number, physician's name, gender, date of birth, and a notation requesting a copy of the Echo report.During an interview with the Director of Quality Management on 4/6/12 at 2:40, the Director confirmed and stated, "The Monitor Tech on the floor dialed the area code as "902" instead of "909" and it went to the private individual instead to (name of the acute care hospital). Review of the facility's policy and procedure titled "Transmission and Receipt of Protected Health Information Via Fax", Policy Number: H-IM 06.010, indicated that the sender should "Fill out and include a cover sheet, specifying phone and fax numbers of sending and receiving parties ..."
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights