Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
ST JUDE MEDICAL CENTER
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on December 27, 2011. Also cited in 29 other reports.
Report ID: EGT711.02, California Department of Public Health
Reported Entity: ST JUDE MEDICAL CENTER
Issue:
Based on review of hospital documents and interview, the hospital failed to prevent the disclosure of protected health information (PHI) to unauthorized individual(s) and/or entity(ies) for Patient R. Additionally, the hospital failed to notify the Department regarding the breach of PHI for Patient R within five business days of their knowledge of its occurrence. Findings:Review of documentation showed the hospital was made aware on 3/7/11, Patient R's PHI was breached.The hospital's investigation showed Patient R had previously been treated at the hospital under Worker's Compensation insurance. At the patient's most recent visit to the hospital's Emergency Department, during the registration process, the Worker's Compensation insurance was brought forward as the insurance to be billed. The hospital was notified Patient R's employer was billed for the patient's last visit to the Emergency Department, which was personal and not work related. The PHI disclosed to Workmer's Compensation insurance and the patient's employer included the patient's name, address, phone number, services rendered and the cost of those services obtained during the hospital visit.The hospital discovered the breach of Patient R's PHI on 3/7/11. The Department was made aware of the breach on 3/21/11.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280