Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
CONTRA COSTA REGIONAL MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on January 6, 2014. Also cited in 103 other reports.
Report ID: K7R411.01, California Department of Public Health
Reported Entity: CONTRA COSTA REGIONAL MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to prevent unauthorized disclosure of Patient 51's protected, confidential health information, when the patient's personal information was discussed, by a nurse, with another employee who was not authorized to receive the information. This failure allowed for potential unauthorized use of the information and was a violation of the patient's right to privacy. Findings: During an interview on 1/06/14 at 11 a.m., Employee A confirmed that the patient's information had been verbally shared with another employee. The content of the information shared was not known and the incident had occurred in past years. The electronic file was not accessed inappropriately. Employee A confirmed that the patient had reported that the incident had occurred.The incident resulted from the staff person's failure to comply with privacy policies by discussing the medical care of a patient with another employee. The patient was an employee and acquaintance of both parties in the discussion.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280