Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
RIVERSIDE COMMUNITY HOSPITAL
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on October 31, 2013. Also cited in 64 other reports.
Report ID: UVSS11.01, California Department of Public Health
Reported Entity: RIVERSIDE COMMUNITY HOSPITAL
Issue:
Based on interview and record review, the facility failed to prevent the unauthorized access and /or disclosure of Patient A's protected health information (PHI), when a document containing Patient A's information was given to the wrong patient. This had the potential to result in the misuse of the patients' private demographic and health information. Findings: On October 31, 2013, at 2 p.m., an investigation was conducted for this entity reported incident. On October 31, 2013, at 2 p.m., the Facility Privacy Official (FPO) was interviewed. The FPO stated on October 17, 2013, an unauthorized disclosure of Patient A's PHI occurred. The FPO stated on October 18, 2013, a patient informed the facility she had received documents meant for another patient. The FPO stated the information given to the wrong patient included Patient A's name, date of birth and medical record number. On October 31, 2013, a letter sent to Patient A's parent was reviewed. The letter indicated "We are writing to inform you that we discovered on October 18, 2013 that on October 17, 2013 information contained in your child's records...was inappropriately disclosed." The facility policy titled, "Safeguarding Protected Health Information," with an effective date of November 1, 2011, was reviewed. The policy indicated: "Purpose: to facilitate compliance...To establish guidelines for protecting and safeguarding protected health information... The facility must take reasonable steps to safeguard and protect PHI...Paper Documents Containing PHI...Facilities must have a process inplace to verify documents are for the correct patient prior to providing the document to the recipient..."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280