Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
KAISER FOUNDATION HOSPITAL-MORENO VALLEY
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on October 31, 2012. Also cited in 13 other reports.
Report ID: QDZI11, California Department of Public Health
Reported Entity: KAISER FOUNDATION HOSPITAL-MORENO VALLEY
Issue:
Based on interview and documents review, the facility failed, for one patient (Patient B), to ensure that Personal Health Information (PHI) was not disclosed to an entity not authorized to receive the information. This failed practice had the potential to result in medical identity theft and/or fraud. Findings:On October 31, 2012, at 10:10 a.m., the facility's Director of Accreditation, Recertification and Licensing (DOA) was interviewed. The DOA stated on October 22, 2012, a nurse in the Labor and Delivery Department at Moreno Valley campus discharged Patient A. The discharge instructions sheets contained Patient B's name and medical record number were given to Patient A. The patient's information and follow up appointments sections were meant for Patient B. Other information printed on the discharge instructions sheets were correct for Patient A. The Charge Nurse discovered the error and reported to the Assistant Clinical Manager on the same day. Patient A returned the wrong paper works to the Labor and Delivery Department at Moreno Valley campus on October 23, 2012. Patient B was informed by the facility of the unauthorized disclosure by mail on October 26, 2012. On October 31, 2012, a review of facility documents with the DOA included:a. The discharge instructions sheets. The PHI included Patient B's name, medical record number, discharge date, allergies and follow up appointments information. b. A letter addressed to Patient B, dated October 24, 2012, indicated the facility notified Patient B of the privacy breach.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280