SANTA CLARA VALLEY MEDICAL CENTER

Report ID: EGUY11.03, California Department of Public Health

Reported Entity: SANTA CLARA VALLEY MEDICAL CENTER

Issue:

Based on interview and record review, the hospital failed to report to the affected patient, the disclosure of patient's health information (PHI) to an unauthorized individual within the required five business days for one of two sampled patients (1). This failure delayed the notification of the breach to Patient 1. Findings:The California Department of Public Health received a faxed report on 4/23/13, which indicated Patient 1's PHI had been accidentally disclosed to Patient 2 on 4/4/13 and the hospital became aware of the disclosure on 4/9/13. On 6/24/14 at 10:10 a.m., during the investigation process, the Department notified the hospital, the PHI disclosure notice dated 4/23/13 was sent to the incorrect patient (Patient 2). During an interview on 6/24/14 at 12:40 p.m., the ethics and compliance officer (ECO) confirmed the hospital had sent the disclosure notice to the incorrect patient. ECO stated the hospital was not aware if Patient 1 had been notified of the PHI disclosure. ECO then stated she and the pharmacy assistant director would call Patient 1 to notify him of the PHI disclosure.The hospital made an initial attempt to notify Patient 1 of the disclosure of PHI on 4/23/13, and an official letter was sent to Patient 1 on 6/25/14. A review of a copy of a letter dated 6/25/14, from the hospital to Patient 1 indicated Patient 1's medical information was inadvertently disclosed to another patient on 4/4/13.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

The report containing this deficiency also includes information about 4 other violations. Note that these may be related to the same event: EGUY11.01, EGUY11.02, EGUY11.04, EGUY11.05

3 other violations reported on the same date. Note that other citations may be about the same event: CRM711.01, CRM711.02, ITGS11.01