Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Oroville Hospital
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on August 3, 2015. Also cited in 5 other reports.
Report ID: WDCP11, California Department of Public Health
Reported Entity: OROVILLE HOSPITAL
Issue:
Based on observation, interview and policy review, the hospital failed to ensure one of 30 sampled residents' electronic medical records was secure, when the mobile computer work station was left unattended, unsecured, and visible in the hall of Unit 1.Findings: During an initial tour of Unit 1 on 8/3/15 at 9:45 am with Administrative (Adm) Nurse C, a mobile charting station was observed in the hallway by the nurse's station. The mobile charting station was unattended and opened to Patient 12's record. Patient 12's record was clearly and easily visible to passers by. Adm Nurse C concurrently confirmed that the mobile charting station was left unsecured and the screen should have been minimized to eliminate visibility.On 8/4/15, the hospital's Confidentiality of Protected Health Information policy, dated 8/14, showed that leaving a computer work station unsecured (especially with personal health information displayed onscreen) was a "Violation/Breach of Patient confidentiality" and that appropriate levels of protection of confidentiality must be afforded to all computerized personal health information. The hospital's Information Systems Confidentiality and Security Policy, dated 4/20/15, showed that failure to log off the computer when finished can result in unauthorized individuals being able to view the information left on the screen and was a security violation.
Outcome:
Deficiency cited by the California Department of Public Health: PATIENT RIGHTS: CONFIDENTIALITY OF RECORDS