Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
MARIN GENERAL HOSPITAL
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on February 28, 2012. Also cited in 63 other reports.
Report ID: QQ2911.01, California Department of Public Health
Reported Entity: MARIN GENERAL HOSPITAL
Issue:
Based on interview and document review, the hospital failed to prevent unauthorized access to one patient's protected health information (PHI).Findings:In interview on 2/28/12 at11:00 a.m., Staff A stated that on 4/12/11, Patient 1's computerized axial tomography (CAT) scan and ultrasound reports were sent to a physician with the same last name but different first name from the intended recipient. In interview on 2/28/12 at 11:30 a.m., Staff B stated that Staff C notified her on 4/15/11 that the unintended physician's office reported having received Patient 1's information in error. Staff B stated that the physician's office confirmed having destroyed the reports. She stated that she had determined that during the pre-registration process, Staff D clicked on the wrong physician's last name. Staff B stated that the pre-registration system determined the physician name to which the reports were automatically faxed. The final dictated reports listed the ordering physician correctly but the physician chosen during the pre-registration process automatically received the report. Staff B stated that she notified Patient 1 and the Department of the error by telephone on 4/12/11. She stated that because of questions about Patient 1's physical status, a final letter was not sent to the patient until 5/3/11.Record review on 2/28/12 demonstrated that Patient 1's breached PHI consisted of age, sex (equivocal), date of birth, medical record number, chief complaint, test results, diagnosis, and ordering physician.Record review on 2/28/12 confirmed that the Department was notified of the event on 4/15/11. There was no documentation of Staff B's phone call to Patient 1 on 4/15/11.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280