Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
MARIN GENERAL HOSPITAL
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on February 29, 2012. Also cited in 63 other reports.
Report ID: NHZX11.01, California Department of Public Health
Reported Entity: MARIN GENERAL HOSPITAL
Issue:
Based on interview and document review, the hospital failed to prevent unauthorized access to one patient's protected health information (PHI).Findings:In interview on 2/29/12 at 8:30 a.m., Staff A stated that on 12/8/11, Staff B received a call from a woman who declined to reveal her name and number, stating that she had received Patient 1's x-ray report by fax. Staff B determined that the report was intended for Physician C, but when Patient 1 registered, Staff D had inadvertently entered a wrong phone number for Physician C. Staff D had changed Physician C's last four numbers from 2803 to 3803. Staff B stated that the protocol required that when a report was being sent to a new doctor, a confirmatory fax was to be sent first to ensure the fax number was correct. Staff D had not followed the protocol. Staff A stated that the Department and Patient 1 were notified of the breach on 12/13/11Record review on 2/29/12 demonstrated that Patient 1's breached PHI consisted of name, date, reason, and type of study, result, and ordering physician. Record review on 2/29/12 confirmed that Patient 1 and the Department were notified of the breach on 12/13/11 at 3:30 p.m., within five business days of discovery.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280