This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.

ST BERNARDINE MEDICAL CENTER

2101 N WATERMAN AVE SAN BERNARDINO,CA 92404

Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on November 10, 2011. Also cited in 41 other reports.


Report ID: NO3311, California Department of Public Health

Reported Entity: ST BERNARDINE MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to protect Patient A's protected health information (PHI). This breach caused Patient A's protected health care information to be released.Findings:The facility self reported on 11/9/11 that a billing clerk (Employee A) had submitted a claim on a patient (Patient B) to an incorrect insurance carrier via US mail. The billing information for Patient B in the misdirected billing claim consisted of: a. Age.b. Sex.c. Patient ' s name.d. Date of birth.e. Address.f. Insured unique ID#.g. Numerical revenue codes.h. Service descriptions (Room charges, pharmaceuticals, supplies, lab tests, radiological tests, therapies, anesthesia, OR services).During an interview with the health information officer on 11/10/11, she confirmed that Employee A had violated Patient B's PHI, failed to do insurance verification. Review of the facility's policy and procedure titled "Safeguarding PHI and Sensitive Information", effective date: 1/5/09 indicated, "It is the policy of ... to provide appropriate access to its information based on a need-to-know basis while preserving its confidentiality and integrity. The ... facility shall implement reasonable and appropriate administrative, technical, and physical safeguards ... "

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights

Do you believe your privacy has been violated? Here’s what you can do: