Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
EISENHOWER MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on September 20, 2013. Also cited in 279 other reports.
Report ID: S87I11.01, California Department of Public Health
Reported Entity: EISENHOWER MEDICAL CENTER
Issue:
Based on interview and document review, the facility failed to ensure that Patient A's Protected Health Information (PHI) was not disclosed to any entity not authorized to receive the information. This failed practice resulted in unauthorized access to Patient A's demographic information and medical records.Findings:An unannounced visit was made on September 20, 2013, to investigate a facility self reported breach incident. On September 20, 2013, at 1:30 p.m., an interview was conducted with the compliance officer, and quality director. The compliance officer stated the hospital became aware of the breach on August 15, 2013, during a medical records audit. Patient B ' s discharge instructions had the wrong patient ' s label on the forms. Patient A ' s information was printed on Patient B ' s medical records. The incident happened on August 11, 2013, when Patient A and B were discharged from the hospital. The compliance officer stated the nurse did not verify the correct information had been printed on the forms prior to giving the discharged instructions to the patients. The facility's policy and procedure titled, "Information Privacy," was reviewed. The policy indicated the hospital, "will take all necessary steps to avoid unauthorized or unlawful access, use or disclosure of protected health information..."The facility failed to ensure Patient A's Protected Health Information was not disclosed to any entity not authorized to receive the information.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280