Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Scripps Mercy Hospital
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on January 20, 2012. Also cited in 72 other reports.
Report ID: FQVH11.01, California Department of Public Health
Reported Entity: SCRIPPS MERCY HOSPITAL
Issue:
Based on interview, document and record review, the hospital failed to ensure that one patient's (Patient A) personal and protected health information was not given to Patient B without Patient A's prior authorization.Findings:Patient A was admitted to the Emergency Department (ED) of the hospital on 1/7/12, for treatment of an irregular heart beat. A review of Patient A's medical record was conducted on 1/20/12 at 3:50 P.M. Patient A's medical record contained a Emergency Facesheet. Patient A's Emergency Facesheet contained the following personal and protected health information:1. Patient's name2. Chief Complaint3. Medical Record Number4. Date of Birth5. Social Security Number6. Home Address7. Home Phone Number8. Primary Health Insurance9. Primary Health Insurance Group and Policy Number10. Secondary health Insurance11. Secondary Health Insurance Policy NumberAn interview was conducted with an ED Registered Nurse (RN 1) on 2/24/12 at 1:55 P.M. RN 1 was assigned to the care of Patient B who was admitted to the ED on 1/7/12, for the treatment of cellulitis. RN 1 stated that she printed Patient B's discharge paperwork and handed the paper work to him prior to his discharge. RN 1 further stated that the facesheet of Patient A was inadvertently included in Patient B's discharge paperwork. RN 1 stated that she did not know how Patient A's face sheet got printed.On 2/24/12 at 2:40 P.M., an interview was conducted with the hospital's Patient Relations Coordinator (PRC). The PRC stated that she thought someone else printed Patient A's facesheet and that the facesheet was still sitting in the printer, when RN 1 printed Patient B's paperwork. RN 1 must have grabbed all the papers in the printer.A review of the hospital's policy and procedure entitled ""Health Information, Access, Use and Disclosure" indicated that the hospital staff, "shall access use and disclose protected health information with authorization of patient/legal representatives and in accordance with mandated state and federal requirements..."During the Interview with RN 1 acknowledged that she did not do an adequate job of checking the identifiers on Patient B's discharge paperwork prior to handing the paper work to him. In addition, RN 1 acknowledged that she had not followed the hospital's policy and procedure.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights