NOV 28, 2012 5:27pm ET

Related Links

Intermountain Tracking Patients’ Cumulative Radiation Exposure
May 24, 2013
Using Analytics to Support an ‘Ambulatory ICU’ Model
May 23, 2013
University Settles with Feds After HIPAA Violations
May 22, 2013
Data Entry Error Leads to Data Breach at LSU
May 21, 2013
Consumer Groups, EHR Vendors Talk Back to GOP Senators
May 21, 2013
Rule Sets Pre-existing Coverage Rates
May 20, 2013
Medical Loss Ratio Rules Finalized for Medicare Advantage & Drug Programs
May 20, 2013

Calif. Fines Hospital for Privacy Violations, CEO Gets HIPAA Training

Print
Reprints
Email

The California Department of Public Health has fined Redding-based Shasta Regional Medical Center $95,000 for violating the confidentiality of an individual patient.

The medical center disputes the findings of the department, but agreed to a corrective action plan that includes HIPAA training for the CEO, chief medical officer and director of marketing, according to a department report of findings and the plan.

California Watch, an investigative reporting organization, was working on a story about aggressive Medicare billing practices at Shasta Regional, including frequent billing of treatment to senior citizens for kwashiorkor, which is serious malnutrition that is generally seen in children during famines. California Watch interviewed a patient billed for kwashiorkor treatment that was in the hospital for diabetes treatment and was overweight.

California Watch did not identify the patient in a subsequent story, but the hospital put the pieces together and made the identification.

Hospital CEO Randall Hempling then tried to undermine California Watch’s story by sending an email to virtually every employee in the hospital, about 785, that disclosed information in the patient’s medical record, the news service reported on Nov. 28. Hempling and the CMO also took the patient’s records to a local newspaper in a successful attempt to dissuade the editor from publishing California Watch’s story.  Among other information, the file showed the patient had received a nutritional consultation, which justified the kwashiorkor billing, according to the news service. Medical records the patient requested did not note malnutrition. The story did run in the San Francisco Chronicle and The Orange County Register.

Shasta Regional Medical Center referred requests from Health Data Management for comment to parent company Prime Healthcare Services, which did not respond. A Prime spokesperson told California Watch that the company believes it did nothing wrong and disclosures, if any, were permitted under federal and state law.

The Department of Public Health also fined Shasta Regional another $25,000 for a separate privacy violation incident involving a snooping employee, since terminated, that happened in February 2010.

Comments (0)

Be the first to comment on this post using the section below.

Add Your Comments:
You must be registered to post a comment.
Not Registered?
You must be registered to post a comment. Click here to register.
Already registered? Log in here
Please note you must now log in with your email address and password.
Twitter
Facebook
LinkedIn

As the feds ramp up enforcement of privacy and security rules, providers look to fill protection gaps.

Login  |  My Account  |  White Papers  |  Web Seminars  |  Events |  Newsletters |  eBooks
FOLLOW US
Already a subscriber? Log in here
Please note you must now log in with your email address and password.