HIPAA Helper »
Oroville Hospital »
Jun 18, 2012

This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.

Oroville Hospital

2767 OLIVE HIGHWAY OROVILLE,CA 95966

Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on June 18, 2012. Also cited in 5 other reports.


Report ID: X7T911.01, California Department of Public Health

Reported Entity: OROVILLE HOSPITAL

Issue:

Based on interview and record review, the hospital failed to ensure that Patient 1's right to privacy was protected when an unauthorized person shared a photograph (photo) of Patient 1's amputated finger tips with another person. This failure may have resulted in the dissemination of e-mails and Internet posting of the photo which caused unwanted notification to members of the community of the injuries suffered by Patient 1.Findings:On 5/4/12 at 4:28 pm, the California Department of Public Health was notified that, "Photos of Patient 1's amputated finger tips were taken and distributed by e-mail to others."On 6/19/12 at 2:05 pm, Administrative (Adm) Staff D stated she received a certified letter via the mail on 4/19/12. The letter was from Patient 1's attorney informing the hospital of a wrongful dissemination of photographs taken by a hospital employee during Patient 1's treatment for amputated fingers, due to an industrial accident, on 3/19/12. The letter read, "Unfortunately, after my client's (Patient 1) discharge following his four (4) day stay in your facility, he returned home to inquiries about the photo of his amputated fingers from friends by e-mail and on the Internet. My client has checked with each of his family members who came to the hospital following the incident and none of them took any photographs. Given my client was given general anesthesia in the operating room he obviously was unconscious when the photograph was taken by hospital personnel..the dissemination of the photograph (was) without my clients consent..." A photo was included with the letter of Patient 1's amputated finger tips.On 6/18/12, Patient 1's record was reviewed. Patient 1 was admitted through the emergency department on 3/19/12 at 8:44 am for severe injuries to his right hand due to an industrial accident. Patient 1's record indicated he was taken to surgery and his right finger tips were surgically amputated. Patient 1's record contained a photo of the right hand prior to surgery. This photo was not the same photo as enclosed in the above letter. Patient 1's record did not contain evidence of a consent to release photos of his amputated finger tips.On 6/18/12 at 1:15 pm, Adm Staff E stated the hospital had determined that the photo that was included with the attorney's letter, had been taken with a cell phone in the pathology department (responsible for examining organs, tissues, and body fluids to assist in the diagnosis of disease) because of the cleanliness of the fingertips and the background of the photo. Adm Staff E further stated they had identified that Pathology Staff A had sent a photo of Patient 1's amputated finger tips to Pathology Staff B.On 6/19/12 at 11:20 am, Pathology Staff A was interviewed. Pathology Staff A stated she had collected the specimen (Patient 1's finger tips) from the operating room to transport back to the pathology lab. Pathology Staff A recalled after Patient 1's fingertips were cleaned, she took a photo and sent it to Pathology Staff B because it was different and more interesting than their usual work. Pathology Staff A stated that Pathology Staff B had no need to see the photo as part of her duties. Pathology Staff A did not recall sending the photo to anyone else. She further stated she had deleted the photo from her phone and there was no way to compare if the photo disseminated via e-mail and the Internet (provided in the attorney's letter) was the same photo as the one she took.On 6/19/12 at 10:45 am, Pathology Staff B confirmed that she had received the photo of Patient 1's amputated finger tips from Pathology Staff A. She stated she deleted the photo immediately and now has a new phone so does not have any access to the photo to compare if it was the same photo as the photo disseminated on e-mail and the Internet. Pathology Staff B confirmed that she had no job related duties that required her to see the photo of Patient 1's amputated finger tips. Pathology Staff B denied sending the photo to anyone else.On 6/19/12, the hospital's policy, titled, "Confidentiality of Medical Record and Patient Information," dated 4/10, read, "Employees must guard the secrecy and confidentiality of medical records and any patient-specific information which (s)he encounters during regular duties."Pathology Staff A's personnel file contained a document, titled, "Skill Building," dated 6/27/11, which included 10 acknowledgements, each with Pathology Staff A's initials, in the section of the document titled, "Patient Privacy Training." Pathology Staff A acknowledged, with her initial, the statements "4. Discussing or sharing patient information in the cafeteria, elevators, hallways, e-mail, cell phones, Facebook, Twitter, My Space, etc. is a .. violation." and "5. Using personal cell phones to discuss/take/share photographs of a patient or patient information is a ... violation." On 6/19/12 at 2:30 pm, Privacy Official C confirmed that Patient 1's privacy was breached when Pathology Staff A sent Patient 1's finger tip photo to Pathology Staff B. Privacy Official C further stated that they were unable to definitively determine who sent the e-mails and Internet postings of Patient 1's finger tips.

Outcome:

Fine imposed and deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

Do you believe your privacy has been violated? Here’s what you can do: