Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
FEATHER RIVER HOSPITAL
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on November 30, 2011. Also cited in 7 other reports.
Report ID: XZ2Y11.02, California Department of Public Health
Reported Entity: FEATHER RIVER HOSPITAL
Issue:
Based on interview, the facility failed to report a breach of medical information to the Department or to Patient 1's responsible party within 5 business days after discovery.Findings:On 11/30/11 at 1 pm, the facility's Privacy Officer stated that on 10/10/11 at 8:30 pm, Laboratory Staff (LS) 1 gained unauthorized access to Patient 1's medical information and shared the information with her coworkers.On 11/30/11 at 4:30 pm, the Privacy Officer confirmed that on 10/10/11 at 8:30 pm, the facility was made aware of the unauthorized access of Patient 1's medical information by a staff member. The five business day reporting date would have been on 10/17/11.The Privacy Officer stated the breach incident was not reported to the Department until 11/15/11 at 11:36 am via faxed report, 31 days after the 10/17/11 requirement date. On 3/6/12 at 1 pm, the Privacy Officer confirmed that Patient 1's parents were not notified of the breached information until 11/9/11 at 11 am in a private meeting with Patient 1's father, 25 days after the 10/17/11 requirement date. The Privacy Officer also confirmed Patient 1's parents were also notified of the breach by letter on 11/15/11.
Outcome:
Fine imposed and deficiency cited by the California Department of Public Health: Health & Safety Code 1280