Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
EISENHOWER MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on October 10, 2012. Also cited in 279 other reports.
Report ID: 40DC11.01, California Department of Public Health
Reported Entity: EISENHOWER MEDICAL CENTER
Issue:
Based on interview and document review, the facility failed to ensure their (PHI) Protected Health Information was not disclosed to any entity not authorized to receive the information. This failed practice resulted in unauthorized access to Patient B's demographic information.Findings:On October 10, 2012, and unannounced visit was made to the facility to investigate a breach of PHI.On September 17, 2012, Patient A called the billing office to report he had received the wrong medical receipt. Patient A stated the medical receipt contained another patient's information. Patient A thought he had received the wrong bill. The billing office confirmed that Patient A received the right bill, however the billing office placed the wrong patient label on the bill. The label contained Patient B's information (Patient B's name, date of birth, telephone number, facility account number, and insurance information). The billing office notified the compliance office and reported the breach.An interview was conducted with the Compliance Specialist, on October 10, 2012, at 12:30 p.m. The Compliance Specialist stated the facility staff member put the wrong patient label on the receipt. The Compliance Specialist stated during their investigation, they identified who the staff member was and addressed the breach with that staff member.The facility failed to ensure Patient B's Protected Health Information was not disclosed to any entity not authorized to receive the information.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280