STANFORD HOSPITAL

Report ID: LJKX11, California Department of Public Health

Reported Entity: STANFORD HOSPITAL

Issue:

Based on interview and record review the hospital failed to protect the right for confidential medical treatment for two of two sampled patients (1, 2). Findings:On 1/3/13 at 1 p.m. during an interview with the privacy officer, she stated Patient 1 had notified the hospital on 9/26/12 that employee 1 (EM 1) and employee 2 (EM 2) had accessed her and her daughter's (Patient 2) medical records without authorization to do so. After an internal investigation the hospital identified that EM 1 was Patient 1's ex-husband and EM 2 was EM 1's new wife. The hospital identified EM 1 had not accessed Patient 1 and Patient 2 medical records, but EM 2 had accessed the medical records for Patient 1 and Patient 2 multiple times without a business related reason to do so. According to the privacy officer, EM 2 stated she had accessed the medical records to know what days and times the patients were going to be at the hospital and therefore try to avoid contact with the patients. On 1/3/13 at 1:30 p.m. review of the access audits for Patient 1 and Patient 2 indicated EM 2 had accessed Patient 1's medical record on 12/6/11, 4/27/12 and 6/26/12. EM 2 had accessed Patient 2 medical record a total of 66 times. All accesses were not typical access which pertain to EM 2's job duties.Information disclosed include personal and medical information for both Patient 1 and Patient 2.

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights