Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
COMMUNITY HOSPITAL OF SAN BERNARDINO
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on May 1, 2015. Also cited in 46 other reports.
Report ID: G67611, California Department of Public Health
Reported Entity: COMMUNITY HOSPITAL OF SAN BERNARDINO
Issue:
Based on interview, and record review, the facility failed to ensure the confidential treatment of protected health information (PHI) for Patient A, when a Registered Nurse (RN 1) gave Patient A's discharge instructions to Patient B. This failure resulted in a breach of Patient A's PHI.Findings:During an interview with the Director Of Quality (DQ 1), on May 1, 2015, at 10:49 AM, she stated she was notified of the breach on March 13, 2015 via an e-mail from the Behavior Health Department Director (Director 1). DQ 1 was informed that RN 1 discharged Patient B with Patient A's discharge instructions to (Name of facility). Furthermore, DQ 1 stated that patient A's PHI was subsequently shredded by (Name of facility). During an interview with RN 1, on May 14, 2015, at 8:50 AM, she stated she dischaged Patient B with Patient A's discharge instructions. When asked how this happened, RN 1 stated, we had alot of discharges at one time. I did not verify all the documents belonged to the correct patient upon discharge. "I was trying to be super nurse."During a review of the documentation that was disclosed to Patient B, the document contained Patient A's name, age, medication names and medical record number.A review of the facility's policy and procedure titled, "Safeguarding PHI and Sensitive Information," dated January 12, 2015, indicated (Name of Facility) is responsible "to provide appropriate access to it's information based on a need to know basis while preserverving its confidentiality and integrity..."The failure of RN 1 to ensure the discharge instructions were given to the right patient, (Patient A), resulted in the unauthorized release of patient A's PHI to Patient B.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights