Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
HEMET VALLEY MEDICAL CENTER
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on June 28, 2013. Also cited in 39 other reports.
Report ID: HIWI11.01, California Department of Public Health
Reported Entity: HEMET VALLEY MEDICAL CENTER
Issue:
Based on interview and facility document review, the facility failed to prevent unauthorized access and/or disclosure of Patient 1's medical information, when Patient 1's prescription was given to Patient 2. This failure had the potential to result in misuse of private/protected information.Findings:On June 28, 2013, at 1:30 p.m., The Privacy Officer (PO) was interviewed. The PO stated Patient 1 and Patient 2 were both treated in the Emergency Room on June 5, 2013. The PO stated when the nurse went to discharge Patient 2, she accidentally gave her Patient 1's prescription. She stated an area pharmacy notified the facility the same day that Patient 2 had a prescription meant for Patient 1. She stated Patient 1 was still at the facility and a new prescription was given to him, and Patient 2 received the correct prescription. A copy of the prescription given to Patient 2 was reviewed. The prescription contained Patient 1's name, date of birth, and gender, along with the medications and doses prescribed to Patient 1.The facility policy titled "Breach of PHI - Notification, dated November 2010, indicated "Individually identifiable means that the medical information includes or contains any element of personal identifying information sufficient to allow identification of the individual, such as patient's name..., or other information that, alone or in combination with other publicly available information, reveals the individual's identity."The policy further indicated, "Unlawful or Unauthorized Access means the inappropriate access, review, or viewing of patient medical information without a direct need for medical diagnosis, treatment, or other lawful use..."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280