Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
ST HELENA HOSPITAL-CLEARLAKE
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on February 13, 2013. Also cited in 14 other reports.
Report ID: PEUE11, California Department of Public Health
Reported Entity: ST HELENA HOSPITAL-CLEARLAKE
Issue:
Based on interview and record review, the facility failed to prevent unauthorized access and disclosure of a patient's (Patient 1) protected health information, when some of Patient 1's medical information was faxed to the wrong party. This failure allowed the unlawful or unauthorized access to protected health information.Findings:The California Department of Public Health was notified on 2/12/13 that a, "Breach of Protected Health Information (PHI)", occurred on 2/6/13.During an interview on 2/13/13 at 10:30 a.m., Administrative Staff A stated that she received notification from Staff B, on 2/6/13, that he had been notified, by the Outside Individual D on 2/6/13, that she had received a faxed copy of Patient 1's PHI in error. Patient 1's information included, name, address, phone number, fax number, date of birth, diagnoses, physician name/license number, medical record number and in- home supportive services needed. Administrative Staff A also stated that it was a human error, on the part of Licensed Staff C, in that she misdialed the fax number for Patient 1's Medical Equipment Provider and that subsequently the Outside Individual D called the facility to notify them of the error and returned the PHI for shredding.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280