Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
RIVERSIDE COMMUNITY HOSPITAL
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on July 16, 2014. Also cited in 64 other reports.
Report ID: S8PR11.01, California Department of Public Health
Reported Entity: RIVERSIDE COMMUNITY HOSPITAL
Issue:
Based on interview and record review, the facility failed to prevent unauthorized disclosure of protected health information (PHI) for three patients (Patients 1, 2, and 3) when a different patient (Patient 4) was discharged from the hospital with information used by their nurse's to care for them. This failed practice resulted in unauthorized persons having access to PHI for patients 1, 2, and 3, and the potential for physical, emotional, or financial harm to them.Findings:During an interview with the facility privacy officer (PO) on July 16, 2014, at 10:05 a.m., the PO stated on November 7, 2013, Patient 4 was discharged home from the facility, and the discharge information that was given to him by the nurse included, "Handoff Communication," forms (used by the nurses to give report and provide continuing care to patients) for three other patients (Patients 1, 2, and 3). The Handoff Communication Report documents given to Patient 4 were reviewed on July 16, 2014. The documents included the following PHI:1. Patient 1:a. Name;b. Room number;c. Account number;d. Date of admission;e. Diagnosis;f. Age;g. Sex;h. Height;i. Weight;j. Code status (whether he wanted life saving measures);k. Level of assistance required (Totally dependent on others);l. Living will information;m. Current symptoms;n. Activity level (bedrest);o. Fall risk information (high risk);p. Pressure ulcer information (Stage one on the coccyx [tailbone]);q. Catheter information (being catheterized every four hours)r. Most recent vital signs;s. Last bowel movement;t. Medical history (including quadriplegia and drug abuse);u. Physician's names and phone numbers;v. Emergency contact name and phone number;w. Most recent laboratory results (including abnormalities);x. Plans for discharge (transfer to a skilled nursing facility);y. Medication list; and z. Order information for Morphine (needing renewal);2. Patient 2:a. Name;b. Room number;c. Account number;d. Date of admission;e. Diagnosis;f. Age;g. Sex;h. Height;i. Weight;j. Code status (whether he wanted life saving measures);k. Level of assistance required (one person);l. Living will information;m. Current symptoms;n. Activity level (bed bound);o. Fall risk information (high risk);p. Pressure ulcer information (Stage one on the coccyx [tailbone]);q. Bladder control (incontinent of [unable to control] urine);r. Most recent vital signs;s. Last bowel movement;t. Medical history (including amputation);u. Physician's names and phone numbers;v. Emergency contact name and phone number;w. Most recent laboratory results (including abnormalities);x. Plans for discharge (transfer to a skilled nursing facility); and,y. Medication list; Patient 3:a. Name;b. Room number;c. Account number;d. Date of admission;e. Diagnosis;f. Age;g. Sex;h. Height;i. Weight;j. Code status (whether she wanted life saving measures);k. Living will information;l. Current symptoms;m. Most recent vital signs;n. Last bowel movement;o. Medical history;p. Physician's name and phone number;q. Emergency contact name and phone number; and,r. Most recent laboratory results.The failure of facility staff to verify the correct paperwork was sent home with Patient 4 resulted in disclosure of PHI for Patients 1, 2, and 3.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280