Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
COMMUNITY HOSPITAL OF THE MONTEREY PENINSULA
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on July 12, 2013. Also cited in 24 other reports.
Report ID: BEEG11.01, California Department of Public Health
Reported Entity: COMMUNITY HOSPITAL OF THE MONTEREY PENINSULA
Issue:
Based on interview and record review, the hospital failed to prevent unauthorized access to one patient's (Patient 1) medical information. Findings:On 5/15/13, the California Department of Public Health received a faxed report from the hospital compliance officer which indicated the hospital identified unauthorized access to Patient 1's health information. Staff A reported to the compliance officer her own unauthorized use of Patient 1's electronic record.During an interview on 7/12/13 at 9:00 a.m., the compliance officer stated the hospital determined Staff A accessed the medical record of Patient 1. The compliance officer stated the information was accessed one time on 5/10/13 and Staff A had no clinical or business need to access the information. Patient 1's friend was concerned about her whereabouts and requested information from Staff A.Record review at 9:10 a.m. indicated Staff A completed annual training for compliance and privacy on 9/30/12.During an interview on 7/19/13 at 9:15 a.m., Staff A stated she received a telephone call from a concerned friend of Patient 1. Staff A stated she accessed the electronic record and saw Patient 1 had been discharged. She suggested to the caller to contact Patient 1 through the main number of her retirement facility. Staff A stated the information accessed included Patient 1's name, date of birth, medical record number, and discharge status. Staff A stated she had not been referred to see Patient 1 as part of her job duties.Record review on 7/19/13 at 1:30 p.m., of the hospital's personnel manual dated 3/2012, indicated, "Everyone is expected to treat patient and hospital information in a respectful, professional, and confidential manner. Such information should never be viewed or discussed with another for reasons of personal interest of for reasons outside the employee's responsibilities."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280