Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
SAINT AGNES MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on June 25, 2013. Also cited in 16 other reports.
Report ID: KTKE11, California Department of Public Health
Reported Entity: SAINT AGNES MEDICAL CENTER
Issue:
Based on staff interview and administrative document review, the hospital failed to keep Protected Health Information (PHI) confidential when Patient 1's PHI was accessed via computer by unauthorized individuals. This failure resulted in not protecting the PHI for Patient 1 and possible unauthorized use. Findings: 1. On 12/11/13 at 2:25 p.m., during an interview, the Compliance Coordinator (CC) stated Patient 1's PHI was accessed via computer system by four unauthorized individuals from 5/14/13 through 5/27/13. Review of the medical record indicated the following information was viewed by the unauthorized individuals: Patient's diagnosis, chart review, medical orders and care plans. The PHI accessed included; patient name; date of birth; medical record number; date of service and all medical information. A certified letter dated 6/7/13 was sent to the patient regarding the breach. The Policy and Procedure titled, (Hospital) Privacy and Confidentiality Policy dated 9/17/09 indicates; "(Hospital) requires all employees...to maintain confidentiality of patient, physician and proprietary business Confidential Information. Access and distribution of Confidential Information is limited to authorized individuals in the performance of normal job-related functions. Accessing, distributing or using Confidential Information for any purpose other than performing normal job-related functions is a violation of this policy."
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights