Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
AHMC ANAHEIM REGIONAL MEDICAL CENTER
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on September 10, 2014. Also cited in 14 other reports.
Report ID: CJR111.01, California Department of Public Health
Reported Entity: AHMC ANAHEIM REGIONAL MEDICAL CENTER
Issue:
Based on interview and hospital document review, the hospital failed to prevent the disclosure of Patient I's protected health information (PHI) to unauthorized individuals. Additionally, the hospital failed to notify the Department of the breach of PHI within five days.Review of hospital documentation showed on 7/2/12, Patient I's PHI was inadvertently faxed to an individual rather than the intended home health agency. Patient I's disclosed PHI included a face sheet containing name, age, date of birth, and address, phone number, insurance information and social security number, emergency contact names and phone numbers. The physician's orders, history and physical, physical therapy evaluation and progress notes, medication administration record and laboratory test results were also included.The hospital was aware of the breach on 7/5/12; however, documentation showed the Department was not notified until 7/18/12. On 9/16/14 at 0930 hours, a conference call with the Interim Director of the Health Information Management Department confirmed the breach of PHI occurred as documented.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280