Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
RIVERSIDE COUNTY REGIONAL MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on August 28, 2012. Also cited in 123 other reports.
Report ID: ZF9H11.01, California Department of Public Health
Reported Entity: RIVERSIDE COUNTY REGIONAL MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to prevent unauthorized disclosure of PHI for one patient (Patient 1) when a facility CM faxed her medical records for follow up healthcare to the wrong location. This failed practice resulted in the potential for physical, emotional, and financial harm for the patient.Findings:During an interview with the facility CPO on August 28, 2012, at 10:10 a.m., the CPO stated Patient 1 came to the facility on June 1, 2012, while she was incarcerated. The CPO stated Patient 1's registration indicated she was from the state prison, when she was, in fact, from the county prison. The CPO stated a facility CM faxed the MR for Patient 1 to a CM at the state prison on June 1, 2012, to coordinate follow up care. She stated the CM from the state prison called to report Patient 1 did not reside there, and the facility CM realized Patient 1 resided at the county prison, so the MR should have been faxed there.The MR documents that were faxed to the state prison were reviewed on August 28, 2012. The documents included the following PHI:1. Name;2. MRN;3. Account number;4. Address;5. Name, relationship, and location of next of kin;6. Hospital Service (Gyn);7. Location in facility;8. DOB;9. Incarceration status;10. SSN; 11. Medical history;12. Physical Exam;13. Lab values;14. Treatment provided; and,15. Plans for dischargeThe facility investigation report was reviewed on August 28, 2012. The report indicated the demographics (patient address, phone number, etc) in the computer were entered by the admitting staff incorrectly, so when the CM faxed the MR for Patient 1, she faxed it to the wrong correctional institution.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280