Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
COMMUNITY HOSPITAL OF THE MONTEREY PENINSULA
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on July 12, 2013. Also cited in 24 other reports.
Report ID: 97K211.01, California Department of Public Health
Reported Entity: COMMUNITY HOSPITAL OF THE MONTEREY PENINSULA
Issue:
Based on interview and record review, the hospital failed to prevent unauthorized access to one patient's (Patient 1) medical information. Findings:On 4/15/13, the California Department of Public Health received a faxed report from the hospital compliance officer which indicated the hospital identified unauthorized access to Patient 1's health information.During an interview on 7/12/13 at 9:10 a.m., the compliance officer stated the hospital determined Staff A accessed the medical record of Patient 1. The compliance officer stated the information was accessed one time on 3/22/13, twice on 3/29/13 and twice on 4/1/13. Staff A had no clinical or business need to access the information. Record review at 9:30 a.m. indicated Staff A had completed annual training for compliance and privacy on 9/30/12.During an interview on 7/19/13 at 8:30 a.m., Staff A confirmed she accessed Patient 1's clinical record to see if Patient 1 was still in the hospital. Staff A stated the information accessed included Patient 1's date of birth, medical record number, physician's name and diagnosis. Staff A stated based on her job duties she had no need to access the information.Record review on 7/19/13 at 1:30 p.m., of the hospital personnel manual dated 3/2012, indicated, "Everyone is expected to treat patient and hospital information in a respectful, professional, and confidential manner. Such information should never be viewed or discussed with another for reasons of personal interest of for reasons outside the employee's responsibilities."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280