Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
KAISER FOUNDATION HOSPITAL-MORENO VALLEY
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on July 27, 2012. Also cited in 13 other reports.
Report ID: SCTF11, California Department of Public Health
Reported Entity: KAISER FOUNDATION HOSPITAL-MORENO VALLEY
Issue:
Based on interview and record review, the facility failed to prevent the unauthorized access and/or disclosure of Patient 1 and 2's medical information. This had the potential to result in misuse of private information.Findings:On July 27, 2012, at 1:30 p.m., an investigation was conducted for an entity reported incident. On July 27, 2012, at 2:15 p.m., the Medical-Surgical Unit Manager (MSM) was interviewed. The MSM stated the Registered Nurse (RN) discharged Patient 3 home on February 4, 2012, and inadvertently included records that contained Patient 1 and 2's protected health information (PHI). Patient 1 and 2's records that were provided to Patient 3 contained their names, address, date of birth, physician's name(s), and medical record number. The MSM stated, when discharging a patient, the facility's practice was to have another licensed nurse verify that all documents belonged to the patient that was being discharged. The MSM stated the RN did not follow this process.The facility policy titled, "Mitigation of Impermissible Uses and Disclosure of Protected Health Information" revised on October 2010, was reviewed. The policy indicated, "Kaiser Permanente (KP) must take action to reduce or eliminate, to the extent feasible, any known harm caused by an impermissible use or disclosure of Protected Health Information (PHI) by KP or its business associates."The policy further indicated, "Protected Health Information (PHI) - Individually identifiable health information including demographic information...created or obtained by a covered entity that is related to an Individual's past, present, or future physical or mental health or condition, including the provision of his/her health care..." The policy further indicated, "...Individually identifiable means that the information either identifies the Individual or there is a reasonable basis to believe that the information can be used to identify the Individual, such as name, date of birth, address...other personal identifiers..."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280