Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
RIVERSIDE COUNTY REGIONAL MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on May 8, 2015. Also cited in 123 other reports.
Report ID: OZIP11, California Department of Public Health
Reported Entity: RIVERSIDE COUNTY REGIONAL MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to ensure PHI (personal health information) for one patient (Patient 1) was protected from unauthorization disclosure when the discharging registered nurse (RN) disclosed the Patient 1's diagnosis in the presence of family members. This failure resulted in potential emotional harm to the patient.Findings:An interview was conducted with the Executive Director of Compliance on May 8, 2015, at 2:40 p.m. She stated, "We received a grievance from Patient 1 on April 30, 2015, stating the discharging RN disclosed his diagnosis in the presence of his relatives on April 29, 2015, when Patient 1 was being discharged to another facility and the RN came in to have him sign papers."Patient 1 was notified of the facility's receipt of the disclosure of his protected health information (PHI) via a letter dated and mailed on May 6, 2015, to his last known address.The California Department of Public Health (CDPH) was notified via a facsimile received on May 6, 2015, and a letter dated and mailed on April 30, 2015, of the unauthorized disclosure of Patient 1's medical information.A review of the facility's P&P, "Patient Privacy: HIPPA," was conducted on May 27, 2015. The purpose indicated, "To provide guidance on the protection of patient privacy." The procedure stipulated, "...5.3. a. When discussing a patient's health information at the bedside, the patient's family or visitors shall be asked to momentarily leave the room, unless:the patient has previously agreed to the disclosure or does not express an objection to the disclosure when given the opportunity to do so...b. Always obtain the patient's authorization to disclose sensitive diagnosis information such as HIV status, mental health information, and/or drug or alcohol treatment information."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280