Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Adventist Medical Center
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on July 18, 2012. Also cited in 29 other reports.
Report ID: 8EFV11, California Department of Public Health
Reported Entity: ADVENTIST MEDICAL CENTER
Issue:
Based on staff interview, facility and administrative document review the facility failed to keep Protected Health Information (PHI) confidential when Patient 1's medical diagnosis was disclosed without informed consent.This failure placed Patient 1's PHI at a potential risk for unauthorized use.Findings:On 7/18/12 at 10:15 a.m., Staff 1 (Privacy Officer) stated on 6/6/12 the facility became aware of a possible privacy breach. The facility's internal investigation revealed; on 6/6/12, during the triage process in the Emergency Room (ER), Staff 2 (Registered Nurse) mistakenly disclosed Patient 1's medical history without the patient's informed consent.On 8/7/12 at 1:34 p.m., Patient 1 stated on 6/6/12 she went to the facility ER for pain and swelling to her right arm. Patient 1 stated her son wheeled her into the triage room and Staff 2 began to ask her a few simple questions. Patient 1 stated she thought Staff 2 was only going to be asking questions regarding the pain and swelling to her right arm, but then suddenly and without warning Staff 2 stated "Your HIV positive." Patient 1 stated "I haven't discussed that with my son." On 8/7/12 at 1:42 p.m., Patient 1 stated she visits the ER frequently and has never had a staff question her HIV status.On 9/27/12 the facility policy and procedure number 1000.08.09 titled Confidentiality of Protected Health Information contained the following documentation: "[Facility name] is committed to protecting the privacy and security of protected health information (PHI)...It is the policy to maintain confidentiality for patients and employees at all times and under all circumstances. If a person needs to discuss confidential information with someone else as part of performing his/her job, he/she must take reasonable precautions that the conversation remain private and cannot be overheard. Persons who receive or view information about patient matters in order to do their jobs may not share the information with any others unless the others need to know that information by virtue of their job requirements."
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights