Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Scripps Mercy Hospital
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on April 24, 2014. Also cited in 72 other reports.
Report ID: 4BYJ11.01, California Department of Public Health
Reported Entity: SCRIPPS MERCY HOSPITAL
Issue:
Based on interview and record review the facility failed to maintain patient rights for 1 sampled patient (Patient 1). Patient 1's protected health information was inadvertently disclosed to an un-authorized party. This deficient practice violated the patient's right to privacy and confidentiality. During an interview and joint record review on 4/24/14, the Clinical Risk Specialist (CRS) stated that a document, included in Patient 1's medical record, had been inadvertently faxed (sent by facsimile) to the wrong number. The CRS stated that the error occurred when the facility failed to ensure that an automated number had been inputed the fax number correctly and the document was then sent to a business rather than the patient's intended medical provider. The CRS stated that the document faxed was a summary of the patient's emergency department visit. The emergency department visit summary included the patient's name, date of service, medical history, medications, physical assessment and proposed treatment plan.A review of the facility policy and procedure included "It is the policy of [name of facility] to safeguard its information while allowing access and use to permit [name of facility], and physicians who provide care or refer patients at [name of facility] facilities, to conduct business, care for patients and respond to patient requests for transmission of information...Facsimile transmission...Verify the accuracy of the fax number with the intended recipient before sending the fax." During an interview on 4/24/14 at 1:30 P.M., the CRS acknowledged that the facility had not maintained Patient 1's medical record in a manner that ensured the patient's right to privacy and confidentiality.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights