Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
HEMET VALLEY MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on June 28, 2013. Also cited in 39 other reports.
Report ID: XSV711.01, California Department of Public Health
Reported Entity: HEMET VALLEY MEDICAL CENTER
Issue:
Based on interview and facility document review, the facility failed to prevent unauthorized access and/or disclosure of Patient 1's medical information, when Patient 1's discharge paperwork was given to Patient 2. This failure had the potential to result in misuse of private/protected information.Findings: On June 28, 2013, at 1:30 p.m., the Privacy Officer (PO), was interviewed. The PO stated, the patient was being discharged from Day Surgery, and RN 1 provided the discharge instructions. The PO stated when RN 1 went to the computer to print the discharge instructions, she failed to verify the correct name was highlighted. As a result, RN 1 printed the correct discharge instructions, however Patient 1's Protected Health Information (PHI) was on the instructions. The PO stated Patient 2 inadvertently received Patient 1's PHI on his discharge instructions.A copy of the discharge paperwork given to Patient 2 was reviewed. The "Patient Discharge Instructions," included Patient 1's name, date of birth, and medical record number.The facility policy titled "Breach of PHI - Notification, dated November 2010, indicated "Individually identifiable means that the medical information includes or contains any element of personal identifying information sufficient to allow identification of the individual, such as patient's name..., or other information that, alone or in combination with other publicly available information, reveals the individual's identity."The policy further indicated, "Unlawful or Unauthorized Access means the inappropriate access, review, or viewing of patient medical information without a direct need for medical diagnosis, treatment, or other lawful use..."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280