Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Ukiah Valley Medical Center
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on September 6, 2012. Also cited in 31 other reports.
Report ID: 3OG611.01, California Department of Public Health
Reported Entity: UKIAH VALLEY MEDICAL CENTER/HOSPITAL D
Issue:
Based on interview and document review, the facility failed to prevent unauthorized access to one patient's protected health information (PHI) by an unauthorized person.Findings:In interview on 9/6/12 at 9 am, Staff A stated that Patient 1 called the facility and asked for a copy of her medical records. Patient 1 picked up her records on 8/2/12. On 8/3/12, she called Staff B and stated that Patient 2's report had been included in her records. Staff B told Patient 1 to shred Patient 2's record and then notified Staff A of the breach. Staff A stated that Patient 2's report was for a procedure performed in an outside hospital. It had been sent on 2/25/12, and when received had been scanned, then entered into Patient 1's EMR (electronic medical record) instead of Patient 2's EMR. Staff A stated that it was not possible to determine what staff member had made the error, but noted that the two patients' last names were close in the alphabet.Staff A stated that Patient 2 was notified of the breach on 8/6/12, and the Department was notified on 8/7/12.Document review on 9/6/12, demonstrated that the breached PHI consisted of name, date of birth, medical record number, type of procedure performed, findings, and name of the physician who performed the procedure.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280