Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
EISENHOWER MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on September 10, 2012. Also cited in 279 other reports.
Report ID: 0B0011.01, California Department of Public Health
Reported Entity: EISENHOWER MEDICAL CENTER
Issue:
Based on interview and document review, the facility failed for one patient (Patient A), to ensure that (PHI) Protected Health Information was not disclosed to any entity not authorized to receive the information. This failed practice resulted in unauthorized access to Patient A's demographic information and medical records.Findings:On September 10, 2012, a visit was made to the facility to investigate a breach of PHI.An interview was conducted with the Compliance Officer on September 10, 2012, at 1:45 p.m. The Compliance Officer stated on April 10, 2012, EMC staff discovered Protected Health Information was given to entity not authorized to receive the information. The Compliance Officer stated Patient A's emergency room discharge instructions reflecting his name, age , date of birth, EMC medical/account number, diagnosis, treatment, procedures and medication information was given to another patient. Patient A was seen on April 4, 2012, and (HIM) Health Information Management discovered the breach on April 10, 2012, during a medical records audit. The facility's policy and procedure titled, "HIPPA - Use and Disclosure of Protected Health Information," was reviewed. The policy indicated it was the policy of the facility that the confidentiality of Protected Health Information contained in records and collected pursuant will be protected to the fullest extent and to protect the patient ' s right to privacy, at no time will names or information be shared with any person be shared with any person who does not have a need to know in order to provide patient care. The facility's policy and procedure titled, "Release of a Patient from Emergency Department, was reviewed." The policy did not address how staff was to verify they were giving the discharge instructions to the correct patient.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280