Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
RIVERSIDE COMMUNITY HOSPITAL
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on April 7, 2015. Also cited in 64 other reports.
Report ID: 86CZ11, California Department of Public Health
Reported Entity: RIVERSIDE COMMUNITY HOSPITAL
Issue:
Based on interview and record review, the facility failed to ensure the unauthorized disclosure of Protected Health Information (PHI) for Patient A. PHI regarding Patient A was mailed to Patient B. This failure had the potential for the misuse of Patient A's private/medical information.Findings:On April 7, 2015, at 8:15 a.m., a phone investigation was conducted for an entity reported incident. In a concurrent interview with the Privacy Officer (PO), the PO stated on February 4, 2015, the facility was informed that a document containing the PHI for Patient A was mailed to and received by Patient B.The PO stated thestaff member responsible for the unauthorized disclosure did not verify the documents were being sent to the correct patient, prior to the documents being mailed.The documents mailed to Patient B were reviewed. The documents contained the following information:Patient A's name,Patient A's date of birth,Patient A's home address,Patient A's telephone number,Patient A's physician's name,Patient A's medical record number, andPatient A's facility account number.The facility's policy and procedure titled, "Safeguarding Protected Health Information" dated September 23, 2013, indicated "...Facilities must ensure that reasonable safeguards are in place to protect paper documents containing PHI..Facilities must have in place to verify documents are for the correct patient prior to providing to the recipient..."
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280