Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VALLEY CHILDREN'S HOSPITAL
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on November 16, 2012. Also cited in 40 other reports.
Report ID: N8RT11, California Department of Public Health
Reported Entity: CHILDRENS HOSPITAL CENTRAL CALIFORNIA
Issue:
Based on staff interview, clinical record and administrative document review, the facility failed to protect confidential Patient Health Information (PHI) when Patient 1's discharge prescription was given to Patient 2 upon discharge. This failure resulted in unauthorized access of confidential PHI of Patient 1.Findings:On 11/16/12 at 7:15 a.m., during a interview, the Privacy Officer (PO) stated on 7/18/12 the facility became aware of a privacy breach. The facility's internal investigation revealed Staff 1 mistakenly gave Patient 1's discharge prescription to Patient 2 upon discharge. The PO stated it was Staff 1's responsibility to ensure the correct discharge prescription with PHI was given to the correct Patient. Patient 1's PHI breached included name, date of birth, date of service, medical record number, account number, and primary care provider. On 11/16/12 the facility policy and procedure number PR-1016, titled: "Patient Rights and Services," dated 8/11, indicated "Purpose Statement...establishes clear expectations regarding...confidentiality information as it relates to patients...Policy...will maintain safeguards to protect the privacy of confidential information from unauthorized...disclosure ...all...workforce...expected to follow all policies in handling protected health information...PHI includes any information received, created, or maintained by the facility in which the patient is or may reasonable be identified, regardless of whether the information is in oral, paper, or electronic form."
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights