Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
SUTTER SANTA ROSA REGIONAL HOSPITAL
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on July 5, 2012. Also cited in 15 other reports.
Report ID: KRLX11, California Department of Public Health
Reported Entity: SUTTER SANTA ROSA REGIONAL HOSPITAL
Issue:
Based on interview and document review, the hospital failed to prevent one patient's protected health information from access by unauthoorized persons. Findings:In interview on 7/5/12 at 1:15 pm, Staff A stated that on 2/6/12, a medical staff member mentioned Patient 1's medical diagnosis in front of four or five family members and/or friends. Patient 1 had been diagnosed with HIV/AIDS when in her home country of Uganda eight years previously and had been on antiretroviral agents (medications to prevent and treat HIV/AIDS) since then. Staff A stated that the medical staff was not aware that Patient 1's friends and family did not know her diagnosis and were unaware that in the Ugandan culture, HIV positive individuals were shunned. As a result of the disclosure, Patient 1 suffered emotionally as she was ostracized by her roommate of eight or nine years and by some of her friends and family. Staff A stated that it had been impossible to determine which medical staff member had revealed the diagnosis. Staff A stated that Patient 1 declined to state who mentioned the diagnosis in front of the group. Staff A stated that the hospital arranged new lodgings for Patient 1 and transferred her belongings there. Two of Patient 1's friends stuck by her, and she got a new roommate. Record review on 7/5/12 demonstrated that Patient 1 was seriously ill when she was admitted to the hospital on 1/18/12. She was evaluated and treated in intensive care by multiple physicians, including five specialists: a gynecologist, a hematologist, a nephrologist, an oncologist, and an HIV specialist. Following the health information breach, a social work consultation was obtained, and it resulted in Patient 1's placement in new lodgings.Document review on 7/5/12 demonstrated that the hospital's patient rights policy mandates that each patient has the right to confidential treatment of all communications and records pertaining to the care and stay in the hospital.Document review on 7/4/12 confirmed that the Department was notified of the breach on 2/8/12, within 5 business days. Patient 1 was witness to the breach when it occurred on 2/6/12.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280