Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
EL CENTRO REGIONAL MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on November 2, 2012. Also cited in 38 other reports.
Report ID: I0O311, California Department of Public Health
Reported Entity: EL CENTRO REGIONAL MEDICAL CENTER
Issue:
Based on interview, document and record review, the hospital failed to ensure that one patient's (Patient A) personal and protected health information (PHI) was kept confidential.Findings:An on site investigation of an entity reported privacy breach was conducted on 11/2/12. An interview was conducted with the hospital's Privacy Officer (PO) on 11/21/12, at 11:40 A.M. The PO stated that both Patient A and Patient B were treated in the hospital's Emergency Department (ED) on the same day (10/21/12). Patient A's chief complaint was abdominal pain and Patient B was complaining of chest pain. According to the PO, upon discharge from the ED, Patient B was given Patient A's printed abdominal and pelvic Computerized Tomography (CT) report. As soon as Patient B and her family got home they realized that they had a copy of another patient's (Patient A) CT report. Patient B notified the ED.Patient A's personal and PHI that was on the CT report was as follows:NameDate of BirthAgeTelephone NumberMedical Record NumberDiagnostic Interpretation of the CT ScanThree attempts were made to contact the ED Registered Nurse (RN 1) who discharged Patient B. However, RN 1 never returned the evaluator's phone calls.A review of the hospital's policy and procedure entitled "Access to and Maintenance of the Health Record," specified that "All individuals engaged in the collection, handling or dissemination of patient health information should protect the confidentiality of patient data.." During the interview with the PO, the PO acknowledged that RN 1 was not following the hospital's policy and procedure. RN 1 was responsible for handing the discharge paper work to Patient B. When Patient A's CT scan result was handed to Patient B, Patient A's personal and PHI was not kept confidential.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights