Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VICTOR VALLEY GLOBAL MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on February 24, 2015. Also cited in 8 other reports.
Report ID: CREJ11, California Department of Public Health
Reported Entity: VICTOR VALLEY GLOBAL MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to ensure the confidential treatment of protected health information (PHI) for Patient A, Patient B, Patient C and Patient D, when medical record documents containing the patients' PHI were found loose in the post office.Findings:During a phone interview on February 24, 2015, at 2:45 PM, with the Compliance Privacy Officer (CPO), the CPO stated she was made aware by the Director of Quality and Risk Management that a breach was detected on January 29, 2015. [Used name of Postal Services] notified the facility via a letter regarding documents that were found loose in the mail, and/or had become damaged by the automated equipment. The documents found loose in the post office included; medical record information containing each patient's name, date of birth, sex, social security number, diagnosis, laboratory results, nurse's notes, progress notes, doctor's orders and emergency department notes.The Compliance Privacy Officer (CPO) stated, the Director of Quality and Risk Management was no longer employed with the facility, therefore was unavailable to be interviewed.A review of the facility's policy and procedure titled, "Confidentiality of Protected Health Information," dated October 2010, indicated:"It is the policy of [Name of Facility] to maintain confidentiality for patients ...at all times and under all circumstances."The failure of the facility to ensure the confidential treatment of PHI for Patient A, Patient B, Patient C and Patient D, resulted in the unauthorized released of Patient A, Patient B, Patient C and Patient D's PHI to the post office.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights