Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
HEMET VALLEY MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on March 30, 2015. Also cited in 39 other reports.
Report ID: 8UPP11, California Department of Public Health
Reported Entity: HEMET VALLEY MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to ensure all patient protected health information (PHI) was kept protected, which resulted in the unauthorized access of the patient's confidential information (Patient 1). Patient 1's confidential information was given to Patient 2 during an Emergency Department (ED) visit on March 3, 2015. This resulted in the unauthorized disclosure of Patient 1's protected health information (PHI).Findings:On April 1, 2015, at 9:58 a.m., an interview was conducted with the Director Health Information Management (DHIM). She stated: a. On March 3, 2015, Patient 2 was seen and discharged from the facility ED with a prescription for medications.b. On March 7, 2015, Patient 2 attempted to fill the prescription at a local pharmacy but was turned away because the name and date of birth on the prescription belonged to another patient (Patient 1).c. On March 7, 2015, Patient 2 returned to the facility ED to be treated for her medical condition and was given the correct prescription.d. On March 7, 2015, Patient 2 provided the prescription with Patient 1's PHI to the facility House Supervisor.e. The Registered Nurse (RN) who handed the prescription to Patient 2 had not followed the facility ED policy of verifying the correct document was being given to the correct patient prior to giving Patient 2, a prescription with Patient 1's PHI dated March 3, 2015.Patient 2 received and had an opportunity to view Patient 1's PHI, which included name, date of birth, date of service, and gender.Patient 1 was informed of the disclosure of her protected health information (PHI) via a letter dated and mailed on March 17, 2015, to her last known address.The California Department of Public Health (CDPH) was notified via a facsimile received on March 17, 2015, of the unauthorized access of Patient 1's PHI.The facility policy and procedure titled "Discharge Instructions" revised/reviewed March 2014, revealed "... Verify that documents provided to patients upon discharge pertain to the correct patient. This includes discharge instructions, prescriptions, or any other patient identifiable materials. ..."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280