Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
RIVERSIDE COMMUNITY HOSPITAL
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on December 15, 2014. Also cited in 64 other reports.
Report ID: I6IX11, California Department of Public Health
Reported Entity: RIVERSIDE COMMUNITY HOSPITAL
Issue:
Based on staff interview and record review the facility failed to prevent the unauthorized access and/or disclosure of Patient 1's private health information (PHI) during the discharge process. Patient 1's PHI was given to Patient 2's spouse during the discharge process. This had the potential to result in the misuse of Patient 1's private health information.Findings:On December 15, 2014, at 10 a.m., the Facility Privacy Official (FPO) was interviewed. The FPO stated, "The nurse printed the wrong discharge instructions for Patient 2. Patient 2's spouse signed the wrong instructions but brought the instructions back to the facility. Patient 1 did receive the correct discharge instructions as this incident had occurred before her discharge." The FPO stated,"The breach of information occurred on December 3, 2014, and the facility became aware on December 3, 2014. The Department was notified on December 10, 2014, by fax."A review of the facility letter sent to Patient 1 on December 10, 2014, indicated,"A recent unauthorized disclosure of a patient's protected health information (occurred)...The information included the following direct identifiers: Demographic information-name and date of birth, cell phone number; Clinical Information-medical record number, account number, doctor's name and patient room number."A review was conducted of the facility procedure document dated July 7, 2014, titled, "Patient Discharge Documentation Final Check." The form indicated, "Verify each page of the discharge instructions for the correct patient identification." The facility failed to follow procedure in verifying all pages of Patient 2's discharge instructions prior to discharge. This had the potential to result in the misuse of Patient 1's private health information when given to Patient 2.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280