Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
SANTA CLARA VALLEY MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on April 29, 2014. Also cited in 90 other reports.
Report ID: 5V6L11.01, California Department of Public Health
Reported Entity: SANTA CLARA VALLEY MEDICAL CENTER
Issue:
Based on interview and record review, hospital A failed to protect unauthorized disclosure of patients' health information (PHI) when a document containing names and medical record numbers of 556 dialysis patients was found on the campus of hospital B.Findings:On 9/27/13, the California Department of Public Health received an entity reported incident from hospital A, indicating on 9/23/13, the compliance officer was notified by hospital B a document was found on their campus containing PHI of hospital A's patients. The document contained the names and medical record numbers of dialysis patients. During an interview with the compliance officer (CO) of hospital A on 4/29/14 at 12:15 p.m., she stated hospital B's compliance staff called on 9/23/13 and informed hospital A about a document found outside hospital B's building. The document found on the campus of hospital B contained PHI for 556 dialysis patients receiving care at hospital A. The PHI disclosed included the patient names, medical record numbers and their respective clinic assignments. Hospital B's compliance staff was interviewed on 5/8/14 at 2:15 p.m. She stated a document was brought to their office on 9/23/13. Hospital B's compliance staff stated she recognized the document belonged to Hospital A. She stated she informed Hospital A about the document which contained last and first name of patients, medical record numbers and list of dialysis centers to which these patients were assigned.Review of a copy of the letter sent by the hospital to the patients on 9/30/13 indicated to the patients their medical information was accidentally disclosed.Review of a copy of the document found on the ground of hospital B's building revealed names of 17 dialysis centers with names of 556 patients assigned to these centers and their medical recordnumbers.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280