Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
SANTA CLARA VALLEY MEDICAL CENTER
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on April 4, 2014. Also cited in 90 other reports.
Report ID: MWVN11.01, California Department of Public Health
Reported Entity: SANTA CLARA VALLEY MEDICAL CENTER
Issue:
Based on interview and record review, the hospital failed to prevent unauthorized disclosure of patients' medical information when a staff member (Staff A) provided her personal attorney (Attorney 1) Patient 1's initials, last four digits of her medical record number, and date of service for an emergency room visit. Findings:The Department received an entity reported incident from the hospital on 2/21/13 which indicated on 2/15/13, the hospital was notified by their legal counsel that Staff A had provided to her personal attorney Patient 1's initials, last four digits of her medical record number and date of service for an emergency room visit. During an interview with the facility's Ethics and Compliance Officer (ECO) on 4/4/14 at 11:15 a.m., she stated on 2/18/13, the Ethics and Compliance office received a notice from their legal counsel notifying the hospital, Attorney 1 had submitted a document to court containing Patient 1's initials, last four digits of her medical record number, and date of service for an emergency room visit. Upon review of the document the hospital determined Staff A (Staff A had a pending litigation case against the hospital) had provided Patient 1's information to Attorney 1 for personal gain. ECO further stated, Staff A did not confirm she had provided Patient 1's medical information to Attorney 1. Staff A was no longer employed by the hospital and therefore unable to be interviewed. Review of a copy of the court document submitted by Attorney 1, indicated Patient 1's initials, last for digits of her medical record number, and a date of service of 1/11/13 was disclosed. Review of the hospital's letter addressed to Patient 1 dated 2/21/13 indicated a hospital employee who did not have a business-related reason disclosed her "patient name, date of visit and location of visit" to her attorney.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280